15772 matches found
CVE-2025-9859
The Fintelligence Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fintelligence-calculator' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2025-10383
The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...
CVE-2025-8726
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
WordPress plugin Contest Gallery – Upload, Vote & Sell with PayPal and Stripe 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...
PT-2025-40623
Name of the Vulnerable Software and Affected Versions The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress versions prior to 27.0.3 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of...
WordPress plugin WP Photo Album Plus 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
RockyLinux 10 : httpd (RLSA-2025:15095)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15095 advisory. httpd: insufficient escaping of user-supplied data in modssl CVE-2024-47252 httpd: modssl: access control bypass by trusted clients is possible using T...
EUVD-2025-4809
Malicious code in bioql PyPI...
EUVD-2024-47382
Malicious code in bioql PyPI...
EUVD-2024-50052
Malicious code in bioql PyPI...
EUVD-2024-26998
Malicious code in bioql PyPI...
EUVD-2024-32133
Malicious code in bioql PyPI...
EUVD-2024-27441
Malicious code in bioql PyPI...
EUVD-2024-34209
Malicious code in bioql PyPI...
EUVD-2024-34164
Malicious code in bioql PyPI...
EUVD-2024-47306
Malicious code in bioql PyPI...
EUVD-2024-34099
Malicious code in bioql PyPI...
EUVD-2025-27451
Malicious code in bioql PyPI...