WordPress Draft List plugin <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Draft List versions = 2.6.1...

Exploit for CVE-2025-54352

CVE-2025-54352 PoC Usage Steps to install and test the Wor...

EUVD-2011-0716

Malware in sbrugna...

EUVD-2008-4472

Malware in sbrugna...

EUVD-2011-4962

Malware in sbrugna...

EUVD-2021-11645

Malware in sbrugna...

EUVD-2016-5606

Malware in sbrugna...

EUVD-2011-0698

Malware in sbrugna...

EUVD-2010-5053

Malware in sbrugna...

EUVD-2021-0102

Malware in sbrugna...

EUVD-2021-11687

Malware in sbrugna...

EUVD-2020-12593

Malware in sbrugna...

EUVD-2010-4771

Malware in sbrugna...

EUVD-2021-1166

Malware in sbrugna...

EUVD-2018-0869

Malware in sbrugna...

EUVD-2012-6481

Malware in sbrugna...

EUVD-2006-7197

Malware in sbrugna...

EUVD-2025-32424

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetForm', 'registerGetForms', 'registerGetCampaign' and 'registerGetCampaigns' functions due to a missing capability check...

CVE-2025-11227

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetForm', 'registerGetForms', 'registerGetCampaign' and 'registerGetCampaigns' functions due to a missing capability check...

CVE-2025-11227

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetForm', 'registerGetForms', 'registerGetCampaign' and 'registerGetCampaigns' functions due to a missing capability check...