CVE-2026-18474

The WP Directory Kit WordPress plugin, in versions prior to 1.5.6 , is vulnerable to an unauthenticated SQL injection . The root cause is a failure to sanitize and escape parameters before using them in SQL statements, specifically when a non-default search field type is configured. This flaw can...

EUVD-2020-7360

Malware in sbrugna...

PT-2020-14392

Name of the Vulnerable Software and Affected Versions Nexos theme versions 1.7 and earlier for WordPress Description The issue allows for reflected XSS, specifically through the top-map/?search location= endpoint. This can be exploited by manipulating the search location parameter. Recommendation...