CVE-2025-15380: Improper Neutralization of Input During Web Page Generation

The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'nx-preview' POST parameter in all versions up to, and including, 3.2.0. Thi...

EUVD-2024-29135

Malicious code in bioql PyPI...

EUVD-2024-52367

Malicious code in bioql PyPI...

EUVD-2025-4052

Malicious code in bioql PyPI...

CVE-2024-31239

Cross-Site Request Forgery CSRF vulnerability in Nudgify Nudgify Social Proof, Sales Popup & FOMO.This issue affects Nudgify Social Proof, Sales Popup & FOMO: from n/a through 1.3.3...

CVE-2024-54241

Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification:...

CVE-2025-25141

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zankover Fami Sales Popup fami-sales-popup allows PHP Local File Inclusion.This issue affects Fami Sales Popup: from n/a through = 2.0.0...

CVE-2025-25141

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zankover Fami Sales Popup fami-sales-popup allows PHP Local File Inclusion.This issue affects Fami Sales Popup: from n/a through = 2.0.0...

CVE-2025-25141 WordPress Fami Sales Popup plugin <= 2.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zankover Fami Sales Popup fami-sales-popup allows PHP Local File Inclusion.This issue affects Fami Sales Popup: from n/a through = 2.0.0...

CVE-2025-25141 WordPress Fami Sales Popup plugin <= 2.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zankover Fami Sales Popup fami-sales-popup allows PHP Local File Inclusion.This issue affects Fami Sales Popup: from n/a through = 2.0.0...

CVE-2025-25141

CVE-2025-25141 : WordPress plugin Fami Sales Popup is vulnerable to a PHP Local File Inclusion (LFI) due to improper control of filenames in include/require statements. Affected versions are up to and including 2.0.0. The root cause is unrestricted filename handling that can lead to LFI exposure;...

WordPress plugin Fami Sales Popup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-5951 · Unknown · Fami Sales Popup

Name of the Vulnerable Software and Affected Versions: Fami Sales Popup versions through 2.0.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

CVE-2025-25141: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zankover Fami Sales Popup fami-sales-popup allows PHP Local File Inclusion.This issue affects Fami Sales Popup: from n/a through = 2.0.0...

WordPress Fami Sales Popup plugin <= 2.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Dimas Maulana in WordPress Plugin Fami Sales Popup versions = 2.0.0...

CVE-2024-54241

Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification:...

CVE-2024-54241: Missing Authorization

Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification:...

PT-2024-36120 · Unknown · Elite Notification – Sales Popup

Name of the Vulnerable Software and Affected Versions: Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification versions 1.5 through n/a Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured acces...

CVE-2024-31239

Cross-Site Request Forgery CSRF vulnerability in Nudgify Nudgify Social Proof, Sales Popup & FOMO.This issue affects Nudgify Social Proof, Sales Popup & FOMO: from n/a through 1.3.3...

CVE-2024-31239

CVE-2024-31239 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Nudgify Nudgify Social Proof, Sales Popup & FOMO, affecting versions up to 1.3.3. The available data specifies a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, low attack complexity, no c...