EUVD-2025-11782

Malicious code in bioql PyPI...

CVE-2025-39455

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through = 2.9.5...

CVE-2025-39455

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through = 2.9.5...

CVE-2025-39455

CVE-2025-39455 describes a Cross-Site Request Forgery (CSRF) that enables Reflected XSS in the WordPress IP2Location Variables plugin (versions up to and including 2.9.5). Public sources (Patchstack, Red Hat, CVE lists) confirm the affected software and the vulnerability class, with CVSS v3.1 bas...

CVE-2025-39455 WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through = 2.9.5...

CVE-2025-39455 WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ip2location IP2Location Variables allows Reflected XSS. This issue affects IP2Location Variables: from n/a through 2.9.5...

PT-2025-17014 · Unknown · Ip2Location Variables

Name of the Vulnerable Software and Affected Versions: IP2Location Variables versions n/a through 2.9.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. Recommendations: For versions n/a through 2.9.5, update to a version later than 2.9.5 to...

WordPress plugin IP2Location Variables 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...