WordPress Anti-Spam Protection – No API Key, GDPR Friendly plugin <= 2.3.7 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Anti-Spam by Fullworks : GDPR Compliant Spam Protection versions = 2.3.7...

EUVD-2023-28043

Malicious code in bioql PyPI...

EUVD-2023-28038

Malicious code in bioql PyPI...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

PT-2023-15430 · Fullworks · Fullworks Quick Contact Form

Name of the Vulnerable Software and Affected Versions: Fullworks Quick Contact Form plugin versions = 8.0.3.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions = 8.0.3.1, update t...

CVE-2023-25702

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

CVE-2023-23979

Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 versions...

CVE-2023-23979 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 versions...

PT-2023-19332 · Fullworks · Fullworks Quick Event Manager Plugin

Name of the Vulnerable Software and Affected Versions: Fullworks Quick Event Manager plugin versions prior to 9.7.5 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. Recommendations: For versions prior to 9.7.5, update to version 9.7.5 or later to...

CVE-2022-46863

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Event Manager plugin = 9.6.4 versions...

WordPress Plugin Fullworks Quick Event Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...