WordPress Slick Google Map plugin <= 0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Slick Google Map versions = 0.3...

CVE-2025-11197 Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

EUVD-2020-23941

Malware in sbrugna...

EUVD-2020-23937

Malware in sbrugna...

EUVD-2020-23940

Malware in sbrugna...

EUVD-2020-23936

Malware in sbrugna...

EUVD-2021-12758

Malware in sbrugna...

EUVD-2020-23939

Malware in sbrugna...

EUVD-2020-23944

Malware in sbrugna...

EUVD-2020-23943

Malware in sbrugna...

EUVD-2021-24920

Malware in sbrugna...

EUVD-2020-23942

Malware in sbrugna...

EUVD-2025-24887

Malicious code in bioql PyPI...

EUVD-2025-26925

Malicious code in bioql PyPI...

EUVD-2025-26933

Malicious code in bioql PyPI...

CVE-2025-60173 WordPress GST for WooCommerce Plugin <= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ashwani kumar GST for WooCommerce gst-for-woocommerce allows Stored XSS.This issue affects GST for WooCommerce: from n/a through = 2.0...

CVE-2025-60124 WordPress Simple Colorbox Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Hellyer Simple Colorbox simple-colorbox allows Stored XSS.This issue affects Simple Colorbox: from n/a through = 1.6.1...

CVE-2025-57918 WordPress LinkedInclude Plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ERA404 LinkedInclude linkedinclude allows Stored XSS.This issue affects LinkedInclude: from n/a through = 3.0.4...

CVE-2025-57932

PowerFolio (Portfolio & Image Gallery for Elementor) is affected by a Stored Cross-Site Scripting (XSS) in the plugin’s web page generation due to improper input neutralization. Affected versions are PowerFolio up to 3.2.1; exploitation requires an authenticated user (Contributor+). The issue has...

CVE-2025-58676 WordPress HORIZONTAL SLIDER Plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in extendyourweb HORIZONTAL SLIDER horizontal-slider allows Stored XSS.This issue affects HORIZONTAL SLIDER: from n/a through = 2.4...