CVE-2025-13007

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

CVE-2025-13007 WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) <= 3.20.3 - Unauthenticated Stored Cross-Site Scripting via External Content Import

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

CVE-2025-13007 WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) <= 3.20.3 - Unauthenticated Stored Cross-Site Scripting via External Content Import

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

PT-2025-48647

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

EUVD-2023-46181

Malicious code in bioql PyPI...

CVE-2023-41689

The CVE-2023-41689 entry maps to the WordPress plugin “Post to Google My Business (Google Business Profile)” where versions

WordPress Post to Google My Business (Google Business Profile) Plugin <= 3.1.14 is vulnerable to Broken Access Control

Software Post to Google My Business Google Business Profile Type Plugin Vulnerable versions = 3.1.14 Fixed in 3.1.15 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41689 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3e429cdbca73...

WordPress Post to Google My Business (Google Business Profile) plugin < 3.0.10 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Post to Google My Business Google Business Profile plugin versions 3.0.10. Solution Update the WordPress Post to Google My Business Google Business Profile plugin to the latest available version at lea...

WordPress Post to Google My Business (Google Business Profile) plugin < 3.0.10 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Post to Google My Business Google Business Profile plugin versions 3.0.10. Solution Update the WordPress Post to Google My Business Google Business Profile plugin to the latest available version at least 3.0.10...