43 matches found
CVE-2023-25714
Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 5.7.25...
EUVD-2022-49644
Malicious code in bioql PyPI...
EUVD-2023-27968
Malicious code in bioql PyPI...
EUVD-2023-28039
Malicious code in bioql PyPI...
EUVD-2023-29623
Malicious code in bioql PyPI...
EUVD-2023-29624
Malicious code in bioql PyPI...
EUVD-2023-29014
Malicious code in bioql PyPI...
EUVD-2022-50368
Malicious code in bioql PyPI...
EUVD-2023-29612
Malicious code in bioql PyPI...
CVE-2023-25702
Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...
CVE-2023-23889
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...
CVE-2023-23885
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...
CVE-2023-23974
Cross-Site Request Forgery CSRF vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 affecting all registration actions delete, delete all, edit, update...
CVE-2023-23979
Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 versions...
CVE-2023-23975
Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Event Manager: from n/a through 9.7.4...
PT-2025-22783 · Fullworks · Fullworks Quick Contact Form
Name of the Vulnerable Software and Affected Versions: fullworks Quick Contact Form versions n/a through 8.2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential...
CVE-2022-47608
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...
CVE-2023-25035
Missing Authorization vulnerability in Fullworks Quick Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Contact Form : from n/a through 8.0.3.1...
CVE-2023-23975
The CVE-2023-23975 entry concerns the WordPress Quick Event Manager plugin (versions
CVE-2023-25035
CVE-2023-25035 refers to a Broken Access Control vulnerability in the WordPress plugin Quick Contact Form (