EUVD-2023-27892

Malicious code in bioql PyPI...

CVE-2023-23806

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davinder Singh Custom Settings plugin = 1.0 versions...

CVE-2023-23806

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davinder Singh Custom Settings plugin = 1.0 versions...

CVE-2023-23806

CVE-2023-23806 affects WordPress through the Davinder Singh Custom Settings plugin (

CVE-2023-23806 WordPress WordPress Custom Settings Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davinder Singh Custom Settings plugin = 1.0 versions...

PT-2023-19220 · Unknown · Davinder Singh Custom Settings Plugin

Name of the Vulnerable Software and Affected Versions: Davinder Singh Custom Settings plugin versions 1.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Davinder Singh Custo...