EUVD-2026-1749

The The Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'thetooltip' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

EUVD-2026-1454

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls...

EUVD-2025-205701

DVP-12SE11T - Denial of Service Vulnerability...

CVE-2023-1112

A vulnerability was found in Drag and Drop Multiple File Upload Contact Form 7 5.0.6.1 on WordPress. It has been classified as critical. Affected is an unknown function of the file admin-ajax.php. The manipulation of the argument uploadname leads to relative path traversal. It is possible to laun...

GHSA-WXJ2-777F-VXMF

creationtimestamp| type| source ---|---|--- 2024-01-03 22:36:53+00:00| seen| https://t.me/ctinow/162626...