WP-Links-Page-CVE-Report

WP-Links-Page-CVE-Report CVE-2025-10175 的披露信息 CVE-2025-10175 - WP Links Page 中的漏洞 此仓库披露了由 Rico Macchi 开发的 WordPress 插件 WP Links Page getresults"SELECT FROM $table WHERE id = $id ..." 攻击向量 : 基于认证（需要 nonce）的 AJAX 盲 SQL 注入（id 参数） 触发方式 : 通过向 /wp-admin/admin-ajax.php 发送带有有效 nonce 的恶意请求，可观察到时间延迟：...

EUVD-2025-24741

Malicious code in bioql PyPI...

CVE-2025-30998

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

CVE-2025-30998

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

CVE-2025-30998

CVE-2025-30998 affects WordPress WP Links Page (versions up to 4.9.6). Root cause: improper neutralization of special elements in SQL commands, enabling SQL injection. Impact per available data: potential high confidentiality impact and low availability impact (CVSS 3.1 base 8.5). Public document...

PT-2025-17114 · WordPress · Rico Macchi Wp Featured Screenshot

Name of the Vulnerable Software and Affected Versions: Rico Macchi WP Featured Screenshot versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...