EUVD-2025-4032

Malicious code in bioql PyPI...

EUVD-2024-45461

Malicious code in bioql PyPI...

CVE-2024-51629

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MetricThemes Header Footer Composer for Elementor header-footer-composer allows DOM-Based XSS.This issue affects Header Footer Composer for Elementor: from n/a through = 1.0.4...

CVE-2025-25101

Cross-Site Request Forgery CSRF vulnerability in MetricThemes Munk Sites munk-sites allows Cross Site Request Forgery.This issue affects Munk Sites: from n/a through = 1.0.7...

CVE-2025-25101

Cross-Site Request Forgery CSRF vulnerability in MetricThemes Munk Sites munk-sites allows Cross Site Request Forgery.This issue affects Munk Sites: from n/a through = 1.0.7...

CVE-2025-25101 WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in MetricThemes Munk Sites allows Cross Site Request Forgery. This issue affects Munk Sites: from n/a through 1.0.7...

CVE-2025-25101

This CVE affects the WordPress Munk Sites plugin (versions ≤ 1.0.7). The vulnerability is a Cross-Site Request Forgery (CSRF) that allows an attacker to trick an admin into installing and activating arbitrary plugins. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H with a base sco...

CVE-2024-51629

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MetricThemes Header Footer Composer for Elementor header-footer-composer allows DOM-Based XSS.This issue affects Header Footer Composer for Elementor: from n/a through = 1.0.4...

CVE-2024-51629

CVE-2024-51629 is a DOM-Based XSS vulnerability in the WordPress plugin Header Footer Composer for Elementor (MetricThemes) affecting versions up to 1.0.4. Exploitation would involve improper input neutralization during web page generation, enabling an attacker with access to the plugin to inject...

PT-2024-34772 · Metricthemes · Metricthemes Header Footer Composer For Elementor

Name of the Vulnerable Software and Affected Versions: MetricThemes Header Footer Composer for Elementor versions 1.0.0 through 1.0.4 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a DOM-Based XS...