163 matches found
WordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion vulnerability
Authenticated Contributor+ Local File Inclusion vulnerability discovered by zaim in WordPress Plugin Post Grid, Slider & Carousel Ultimate versions = 1.6.10...
EUVD-2025-204648
The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the '/ultp/v2/getdynamiccontent/' REST API endpoint in all versions up to, and including, 5.0.3. This makes it possible...
CVE-2025-12980
The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the '/ultp/v2/getdynamiccontent/' REST API endpoint in all versions up to, and including, 5.0.3. This makes it possible...
CVE-2025-11824
The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgridskincontent' post meta field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-11824
The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgridskincontent' post meta field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2025-35347
The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgridskincontent' post meta field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress plugin Cinza Grid 跨站脚本漏洞
WordPress Cinza Grid plugin is a lightweight WordPress plugin based on Isotope Waterfall Layout for creating responsive grid layouts that support the presentation of posts, pages or custom content types. WordPress Cinza Grid plugin suffers from a cross-site scripting vulnerability that stems from...
EUVD-2020-23519
Malware in sbrugna...
EUVD-2020-23521
Malware in sbrugna...
EUVD-2022-49634
Malicious code in bioql PyPI...
EUVD-2021-34250
Malicious code in bioql PyPI...
EUVD-2021-34635
Malicious code in bioql PyPI...
EUVD-2023-59675
Malicious code in bioql PyPI...
EUVD-2023-32203
Malicious code in bioql PyPI...
EUVD-2023-36841
Malicious code in bioql PyPI...
EUVD-2023-43621
Malicious code in bioql PyPI...
EUVD-2022-15586
Malicious code in bioql PyPI...
EUVD-2023-50452
Malicious code in bioql PyPI...