EUVD-2025-31680

Malicious code in bioql PyPI...

EUVD-2022-24438

Malicious code in bioql PyPI...

CVE-2025-8608

The Mihdan: Elementor Yandex Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block attributes in all versions up to, and including, 1.6.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2025-39942

Name of the Vulnerable Software and Affected Versions Mihdan: Elementor Yandex Maps plugin for WordPress versions through 1.6.11 Description The Mihdan: Elementor Yandex Maps plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s block attributes. This is due to...

CVE-2025-53451

CVE-2025-53451 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Mihdan: No External Links.” Affected range is up to 5.1.4 (from the Initial document). Connected sources indicate the issue is CSRF and show a patched entry for the same vulnerability (No External Links

CVE-2022-1095

The Mihdan: No External Links WordPress plugin before 5.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress plugin Mihdan: Yandex Turbo Feed 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Mihdan: A security...

WordPress Mihdan: No External Links plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Mihdan: No External Links plugin 4.8.0 and earlier versions are vulnerable to a cross-site scriptin...

Mihdan: No External Links < 5.0.2 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup Put the following payload in any of the text field...