151 matches found
EUVD-2024-40828
Malicious code in bioql PyPI...
EUVD-2025-8809
Malicious code in bioql PyPI...
CVE-2024-44047
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.2...
CVE-2023-22711
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Agent Evolution IMPress Listings plugin = 2.6.2 versions...
CVE-2019-13578
A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/payments/class-payments-query.php...
CVE-2025-31556
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.3...
CVE-2025-31556
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.3...
CVE-2025-31556 WordPress IMPress for IDX Broker plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker allows Stored XSS. This issue affects IMPress for IDX Broker: from n/a through 3.2.3...
CVE-2025-31556
CVE-2025-31556 affects IMPress for IDX Broker (WordPress) up to version 3.2.3 with a stored XSS due to improper input neutralization during web page generation. A patch addressing this issue was released in 3.2.3. Base score 6.5 (CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).
WordPress plugin IDX Broker IMPress for IDX Broker 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2024-51704
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in John Hanusek imPress wp-js-impress allows Reflected XSS.This issue affects imPress: from n/a through = 0.1.4...
CVE-2023-45633
Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IMPress Listings: from n/a through 2.6.2...
CVE-2023-45633 WordPress IMPress Listings plugin <= 2.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IMPress Listings: from n/a through 2.6.2...
CVE-2023-45633 WordPress IMPress Listings plugin <= 2.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IMPress Listings: from n/a through 2.6.2...
WordPress plugin IMPress Listings 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-1492 · Unknown · Idx Impress Listings
Name of the Vulnerable Software and Affected Versions: IDX IMPress Listings versions n/a through 2.6.2 Description: The issue is related to a Missing Authorization vulnerability in IDX IMPress Listings, which allows exploiting incorrectly configured access control security levels. Recommendations...
CVE-2024-51704
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in John Hanusek imPress wp-js-impress allows Reflected XSS.This issue affects imPress: from n/a through = 0.1.4...
CVE-2024-51704 WordPress imPress plugin <= 0.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in John Hanusek imPress wp-js-impress allows Reflected XSS.This issue affects imPress: from n/a through = 0.1.4...
CVE-2024-51704 WordPress imPress plugin <= 0.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in John Hanusek imPress wp-js-impress allows Reflected XSS.This issue affects imPress: from n/a through = 0.1.4...
CVE-2024-51704
CVE-2024-51704 affects the WordPress plugin imPress (versions up to 0.1.4). The connected Wordfence data identifies the issue as “Reflected Cross-Site Scripting” (XSS) caused by improper input neutralization during web page generation. The CVE entry is supported by the Wordfence listing which exp...