CVE-2026-70448

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks when processing Ivy report files...

CVE-2026-70448

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks when processing Ivy report files...

CVE-2026-70448

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks when processing Ivy report files...

EUVD-2026-53542

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks when processing Ivy report files...

CVE-2026-70448

The Jenkins Ivy Report Plugin (version 1.2 and earlier ) is vulnerable to XML External Entity (XXE) attacks because it fails to configure its XML parser to prevent external entities when processing Ivy report files. This flaw allows attackers who can control workspace contents to force the Jenkin...

CVE-2026-70448: Improper Restriction of XML External Entity Reference

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks when processing Ivy report files...

PT-2026-68283

Name of the Vulnerable Software and Affected Versions Jenkins Ivy Report Plugin versions prior to 1.3 Description The software fails to properly configure its XML parser when processing Ivy report files, making it susceptible to XML External Entity XXE attacks. XXE is a type of attack that occurs...

EUVD-2024-33257

Malicious code in bioql PyPI...

CVE-2025-32541 WordPress WooCommerce Sales MIS Report Plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin WooCommerce Sales MIS Report woocommerce-mis-report allows Reflected XSS.This issue affects WooCommerce Sales MIS Report: from n/a through = 4.0.3...

CVE-2024-10711

The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update arbitrary...

WordPress AlT Report plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin AlT Report versions = 1.12.0...

CVE-2023-32299

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Sales Report ni-woocommerce-sales-report allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Sales Report: from n/a through = 3.7.3...

Malware in seller-vuex-report-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in seller-vuex-report-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d1caf07f7bf71a4f82b9bc3d65c3a2cbd6a7f7762185704479a04da297485e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10809 Malicious code in seller-vuex-report-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d1caf07f7bf71a4f82b9bc3d65c3a2cbd6a7f7762185704479a04da297485e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10711

The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update arbitrary...

CVE-2024-38683 WordPress WooCommerce Report plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in iThemelandCo WooCommerce Report allows Reflected XSS.This issue affects WooCommerce Report: from n/a through 1.4.5...

CVE-2023-27627

Unauth. Reflected Cross-Site Scripting XSS vulnerability in eggemplo Woocommerce Email Report plugin = 2.4 versions...

@github1/protractor-axe-html-report-plugin (>=1.1.2, <=1.1.3), protractor-axe-html-report-plugin (>=0.0.1, <=1.1.1) +1 more potentially affected by CVE-2020-36629 via httpster (1.0.3)

httpster NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on httpster and may be impacted: - @github1/protractor-axe-html-report-plugin =1.1.2, =0.0.1, =1.0.0, =2.1.0 Source cves: CVE-2020-36629 Source advisory: OSV:GHSA-P8J8-WXVP-H695...

Stored XSS vulnerability in Locked Files Report Plugin

Jenkins Locked Files Report Plugin 1.6 and earlier does not escape locked files' names in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...