PT-2025-52050

Name of the Vulnerable Software and Affected Versions PostX versions through 4.1.36 Description An authorization issue exists in WPXPO PostX ultimate-post due to incorrectly configured access control security levels. This allows exploitation of the system. Recommendations Update PostX to a versio...

EUVD-2021-11572

Malware in sbrugna...

EUVD-2021-11571

Malware in sbrugna...

EUVD-2021-11573

Malware in sbrugna...

EUVD-2023-40353

Malicious code in bioql PyPI...

EUVD-2025-8573

Malicious code in bioql PyPI...

EUVD-2024-44872

Malicious code in bioql PyPI...

EUVD-2024-29142

Malicious code in bioql PyPI...

EUVD-2024-46463

Malicious code in bioql PyPI...

EUVD-2024-45085

Malicious code in bioql PyPI...

EUVD-2024-52150

Malicious code in bioql PyPI...

EUVD-2023-44615

Malicious code in bioql PyPI...

WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abu Hurayra in WordPress Plugin PostX versions = 4.1.36...

WordPress PostX Plugin <= 4.1.35 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by Denver Jackson in WordPress Plugin PostX versions = 4.1.35...

Malicious code in @zalastax/nolb-postx (npm)

The package @zalastax/nolb-postx was found to contain malicious code...

MAL-2025-13247 Malicious code in @zalastax/nolb-postx (npm)

The package @zalastax/nolb-postx was found to contain malicious code...

CVE-2024-5223

The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploading feature in all versions up to, and including, 4.1.1 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2024-31246

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 3.2.3...

CVE-2024-32564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through = 4.0.1...

CVE-2024-50513

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows Stored XSS.This issue affects PostX: from n/a through = 4.1.15...