CVE-2023-45049

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.7 versions...

EUVD-2023-49370

Malicious code in bioql PyPI...

EUVD-2023-38081

Malicious code in bioql PyPI...

CVE-2023-33931

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.4 versions...

CVE-2023-45049

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.7 versions...

CVE-2023-45049

CVE-2023-45049 affects the WordPress YouTube Playlist Player plugin (

CVE-2023-45049 WordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.7 versions...

WordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)

Software YouTube Playlist Player Type Plugin Vulnerable versions = 4.6.7 Fixed in 4.6.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45049 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a841ece82073 Credits yuyudhn Require...

CVE-2023-33931

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.4 versions...

CVE-2023-33931

CVE-2023-33931: Cross-Site Request Forgery in the YouTube Playlist Player WordPress plugin (≤ 4.6.4). Root cause: CSRF in the plugin enables unauthorized actions; impact variants described in public sources. Affected: YouTube Playlist Player plugin for WordPress. Remediation: update to 4.6.5 or l...

PT-2023-24577 · Unknown · Ciprian Popescu Youtube Playlist Player

Name of the Vulnerable Software and Affected Versions: Ciprian Popescu YouTube Playlist Player plugin versions prior to 4.6.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended...

WordPress YouTube Playlist Player Plugin <= 4.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software YouTube Playlist Player Type Plugin Vulnerable versions = 4.6.4 Fixed in 4.6.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-33931 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 07d0f46aa846 Credits Skalucy...

Viral Playlist Video Player - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Viral Playlist Video Player published at the 'play' market has multiple vulnerabilities...