CVE-2025-62971 WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrestaProject Attesa Extra attesa-extra allows Stored XSS.This issue affects Attesa Extra: from n/a through = 1.4.7...

CVE-2025-62971

CVE-2025-62971 is a stored XSS vulnerability affecting CrestaProject Attesa Extra WordPress plugin (Attesa Extra) versions up to and including 1.4.5. Connected sources corroborate the flaw and specify stored XSS in input handling during web page generation, impacting Attesa Extra versions n/a thr...

EUVD-2021-12022

Malware in sbrugna...

EUVD-2019-7056

Malware in sbrugna...

EUVD-2020-24201

Malware in sbrugna...

EUVD-2021-12016

Malware in sbrugna...

EUVD-2025-12295

Malicious code in bioql PyPI...

EUVD-2025-12292

Malicious code in bioql PyPI...

EUVD-2024-33246

Malicious code in bioql PyPI...

EUVD-2025-24542

Malicious code in bioql PyPI...

EUVD-2023-27974

Malicious code in bioql PyPI...

EUVD-2023-12767

Malicious code in bioql PyPI...

EUVD-2024-33250

Malicious code in bioql PyPI...

EUVD-2024-33296

Malicious code in bioql PyPI...

EUVD-2025-28862

Malicious code in bioql PyPI...

EUVD-2024-46825

Malicious code in bioql PyPI...

EUVD-2024-51714

Malicious code in bioql PyPI...

CVE-2025-9499

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9499

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-58203 WordPress Solace Extra Plugin <= 1.3.2 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from n/a through = 1.3.2...