EUVD-2022-49583

Malicious code in bioql PyPI...

EUVD-2025-3008

Malicious code in bioql PyPI...

EUVD-2023-31365

Malicious code in bioql PyPI...

EUVD-2024-26134

Malicious code in bioql PyPI...

EUVD-2024-42406

Malicious code in bioql PyPI...

EUVD-2022-49946

Malicious code in bioql PyPI...

EUVD-2023-31348

Malicious code in bioql PyPI...

Interlock Ransomware Group Leaks 43GB of Data in City of St. Paul Cyberattack

St. Paul hit by Interlock ransomware attack, 43GB of sensitive data leaked, city refuses ransom, launches Operation Secure…...

Ex-NSA Chief Paul Nakasone Has a Warning for the Tech World

At the Defcon security conference in Las Vegas on Friday, Nakasone tried to thread the needle in a politically fraught moment while hinting at major changes for the tech community around the corner...

CVE-2024-29095

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gemini Labs Site Reviews site-reviews.This issue affects Site Reviews: from n/a through = 6.11.6...

CVE-2023-27629

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Paul Ryley Site Reviews plugin = 6.5.1 versions...

CVE-2023-48743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Menard Simply Exclude allows Reflected XSS.This issue affects Simply Exclude: from n/a through 2.0.6.6...

CVE-2022-47171

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin = 1.1 versions...

CVE-2025-22804

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.23...

CVE-2025-22804

CVE-2025-22804 affects the WordPress plugin Author Avatars List/Block. It is a stored XSS vulnerability exploitable by authenticated users with Contributor+ access (due to insufficient input neutralization in Author Avatars List/Block

CVE-2023-27625

Missing Authorization vulnerability in Paul Ryley Site Reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 6.5.0...

PT-2024-12142 · Unknown · Paul Ryley Site Reviews

Name of the Vulnerable Software and Affected Versions: Paul Ryley Site Reviews versions 6.5.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 6.5.0...

On November 13, NIST NVD finally admitted the obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year (September 30)

On November 13, NIST NVD finallyadmittedthe obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year September 30. This is actually visible in their own statistics. At the moment, there are 19860 identifiers in the backlog. This week, 1136 new CVEs were...

CVE-2024-51761

CVE-2024-51761 describes a Reflected XSS in the WordPress plugin WPHelpful (WPHelpful: from n/a through 1.2.4). The issue stems from improper neutralization of input during web page generation, enabling reflected cross-site scripting. The CVSS/metrics in the document show a Base Score of 7.1 (HIG...

CVE-2024-51761 WordPress WPHelpful plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zackgilbert WPHelpful wphelpful allows Stored XSS.This issue affects WPHelpful: from n/a through = 1.2.4...