CVE-2025-11177 External Login <= 1.11.2 - Unauthenticated SQL Injection via log

The External Login plugin for WordPress is vulnerable to SQL Injection via the 'log' parameter in all versions up to, and including, 1.11.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Improper Validation of Certificate with Host Mismatch

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch via the parseCommonName method . An attacker can gain unauthorized access or impersonate users by crafting malicious X.509 certificates that bypass hostname validation through...

EUVD-2019-9891

Malware in sbrugna...

EUVD-1999-1537

Malware in sbrugna...

EUVD-2002-0971

Malware in sbrugna...

EUVD-2003-0225

Malware in sbrugna...

EUVD-2002-0638

Malware in sbrugna...

EUVD-2016-8107

Malware in sbrugna...

EUVD-2015-8735

Malware in sbrugna...

EUVD-2019-0269

Malware in sbrugna...

EUVD-2003-0490

Malware in sbrugna...

EUVD-2000-0483

Malware in sbrugna...

EUVD-2009-2353

Malware in sbrugna...

EUVD-2006-2717

Malware in sbrugna...

EUVD-2019-1572

Malware in sbrugna...

EUVD-2015-4966

Malware in sbrugna...

EUVD-2015-7328

Malware in sbrugna...

EUVD-2021-20269

Malware in sbrugna...

EUVD-2015-1892

Malware in sbrugna...

EUVD-2020-12330

Malware in sbrugna...