EUVD-2022-5441

Malicious code in bioql PyPI...

EUVD-2022-4660

Malicious code in bioql PyPI...

EUVD-2022-49936

Malicious code in bioql PyPI...

EUVD-2024-27093

Malicious code in bioql PyPI...

EUVD-2023-29403

Malicious code in bioql PyPI...

EUVD-2023-27913

Malicious code in bioql PyPI...

EUVD-2023-31881

Malicious code in bioql PyPI...

EUVD-2022-4971

Malicious code in bioql PyPI...

EUVD-2022-1569

Malicious code in bioql PyPI...

EUVD-2024-51001

Malicious code in bioql PyPI...

WordPress Referral Link Tracker plugin <= 1.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Referral Link Tracker versions = 1.1.4...

CVE-2025-57950

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Glen Scott Plugin Security Scanner plugin-security-scanner allows Stored XSS.This issue affects Plugin Security Scanner: from n/a through = 2.0.2...

WordPress GD bbPress Tools Plugin <= 3.5.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin GD bbPress Tools versions = 3.5.3...

CVE-2025-57950

CVE-2025-57950 corresponds to a Stored XSS in the WordPress Plugin Security Scanner (Plugin Security Scanner) affecting versions up to 2.0.2. The connected Wordfence detail indicates the vulnerability is authenticated (Administrator+) and scored Medium, with a CVSS v3.1 base score of 5.9 (vector:...

PT-2025-38800

Name of the Vulnerable Software and Affected Versions Glen Scott Plugin Security Scanner versions through 2.0.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scrip...

WordPress plugin Accordion 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A lack of authorization vulnerability exists in the WordPress plugin Accordion, which can be...

WordPress plugin Plugin Security Scanner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-0763

The Ultimate Classified Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savecustomfields function in all versions up to, and including, 1.7. This makes it possible for authenticated attackers, with Subscriber-level access a...

CVE-2025-58876

CVE-2025-58876 is a Stored XSS in the WordPress plugin “Aparat Video Shortcode”. Affected versions are up to 0.2.4 (reported as: Aparat Video Shortcode: from n/a through 0.2.4). The underlying issue is improper input neutralization during web page generation, enabling stored cross-site scripting....

CVE-2025-58123 Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic...