EUVD-2022-39089

Malicious code in bioql PyPI...

CVE-2024-7133: Improper Neutralization of Input During Web Page Generation

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.3 does not validate and escape some of its settings before outputting them back in the page, which could allow users with a high role to perform Stored Cross-Site...

CVE-2022-36375: Undefined Security Weakness

Authenticated high role user WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin = 3.6.0 at WordPress...

CVE-2021-36843: Improper Neutralization of Input During Web Page Generation

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered in WordPress Floating Social Media Icon plugin versions = 4.3.5 Social Media Configuration form. Requires high role user like admin...

PT-2021-21379

Name of the Vulnerable Software and Affected Versions WordPress Floating Social Media Icon plugin versions = 4.3.5 Description An Authenticated Stored Cross-Site Scripting XSS issue was found in the Social Media Configuration form of the WordPress Floating Social Media Icon plugin. This issue...