EUVD-2020-23941

Malware in sbrugna...

EUVD-2021-24920

Malware in sbrugna...

EUVD-2020-23943

Malware in sbrugna...

EUVD-2020-23942

Malware in sbrugna...

EUVD-2020-23937

Malware in sbrugna...

EUVD-2021-12758

Malware in sbrugna...

EUVD-2020-23936

Malware in sbrugna...

EUVD-2025-24887

Malicious code in bioql PyPI...

EUVD-2025-26933

Malicious code in bioql PyPI...

EUVD-2025-26925

Malicious code in bioql PyPI...

CVE-2025-60173 WordPress GST for WooCommerce Plugin <= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ashwani kumar GST for WooCommerce gst-for-woocommerce allows Stored XSS.This issue affects GST for WooCommerce: from n/a through = 2.0...

CVE-2025-60124 WordPress Simple Colorbox Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Hellyer Simple Colorbox simple-colorbox allows Stored XSS.This issue affects Simple Colorbox: from n/a through = 1.6.1...

CVE-2025-57918 WordPress LinkedInclude Plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ERA404 LinkedInclude linkedinclude allows Stored XSS.This issue affects LinkedInclude: from n/a through = 3.0.4...

CVE-2025-57932

PowerFolio (Portfolio & Image Gallery for Elementor) is affected by a Stored Cross-Site Scripting (XSS) in the plugin’s web page generation due to improper input neutralization. Affected versions are PowerFolio up to 3.2.1; exploitation requires an authenticated user (Contributor+). The issue has...

CVE-2025-58676 WordPress HORIZONTAL SLIDER Plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in extendyourweb HORIZONTAL SLIDER horizontal-slider allows Stored XSS.This issue affects HORIZONTAL SLIDER: from n/a through = 2.4...

CVE-2025-58690

CVE-2025-58690 is a CSRF vulnerability in Doliconnect for WordPress that can lead to Stored XSS. Affected versions are listed as n/a through 9.5.7; CVSS v3.1 base score 7.1 (High). Patch status shown in connected data indicates a fix in Doliconnect 9.5.7 or later. Remediation: update Doliconnect ...

PT-2025-38930

Name of the Vulnerable Software and Affected Versions WPMK PDF Generator versions through 1.0.1 Description A Cross-Site Request Forgery CSRF issue exists in WPMK PDF Generator, which can also lead to Stored Cross-Site Scripting XSS. The issue allows for potential malicious actions to be performe...

CVE-2025-58880 WordPress Translate This gTranslate Shortcode Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reubenthiessen Translate This gTranslate Shortcode translate-this-google-translate-web-element-shortcode allows Stored XSS.This issue affects Translate This gTranslate Shortcode: from n/a through =...

PT-2025-36188

Name of the Vulnerable Software and Affected Versions: Hide Real Download Path versions n/a through 1.6 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Deepak S Hide Real Download Path, which can also lead to Stored Cross-Site Scripting XSS. Recommendations: At the moment,...

PT-2025-36199

Name of the Vulnerable Software and Affected Versions: KaizenCoders Enable Latex versions n/a through 1.2.16 Description: A Cross-Site Request Forgery CSRF vulnerability exists in KaizenCoders Enable Latex, which can also lead to Stored Cross-Site Scripting XSS. Recommendations: Update KaizenCode...