256 matches found
CVE-2026-4138: Cross-Site Request Forgery (CSRF)
The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7. This is due to missing nonce validation on the plugin's settings form in the dxuc-unanswered-comments-admin-page.php file. This makes it possible for...
CVE-2026-1073: Cross-Site Request Forgery (CSRF)
The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...
CVE-2018-25199: Improper Neutralization of Special Elements used in an SQL Command
OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multiple parameters. Attackers can inject SQL commands via the search parameter in search.php, pageid parameter in page.php, and id...
CVE-2026-1082: Cross-Site Request Forgery (CSRF)
The TITLE ANIMATOR plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings page form handler in inc/settings-page.php. This makes it possible for unauthenticated attackers to modify plugin...
CVE-2025-14999: Cross-Site Request Forgery (CSRF)
The Latest Tabs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the settings update handler in admin-page.php. This makes it possible for unauthenticated attackers to modify plugin...
CVE-2025-15455
A flaw has been found in bg5sbk MiniCMS up to 1.8. Impacted is the function deletepage of the file /minicms/mc-admin/page.php of the component File Recovery Request Handler. This manipulation causes improper authentication. The attack is possible to be carried out remotely. The exploit has been...
CVE-2025-15392 Kohana KodiCMS Search API Endpoint page.php like sql injection
A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of the file cms/modules/pages/classes/kodicms/model/page.php of the component Search API Endpoint. Executing manipulation of the argument keyword can lead to sql injection. It is possible to launch th...
PT-2025-41392
Name of the Vulnerable Software and Affected Versions SVX Portal version 2.7A Description A Cross Site Scripting issue exists in SVX Portal version 2.7A that allows for the execution of arbitrary code. The issue is located in the last heard page.php component and involves the TG parameter...
EUVD-2014-1693
Malware in sbrugna...
EUVD-2012-5786
Malware in sbrugna...
EUVD-2008-2454
Malware in sbrugna...
EUVD-2004-1732
Malware in sbrugna...
EUVD-2007-3637
Malware in sbrugna...
EUVD-2008-2892
Malware in sbrugna...
EUVD-2020-10369
Malware in sbrugna...
EUVD-2008-4155
Malware in sbrugna...
EUVD-2017-16413
Malware in sbrugna...
EUVD-2007-3795
Malware in sbrugna...