24 matches found
EUVD-2025-17164
Malicious code in bioql PyPI...
EUVD-2022-49916
Malicious code in bioql PyPI...
EUVD-2024-52382
Malicious code in bioql PyPI...
EUVD-2024-30330
Malicious code in bioql PyPI...
CVE-2025-27359
Cross-Site Request Forgery CSRF vulnerability in Seerox WP Media File Type Manager wp-media-file-type-manager allows Cross Site Request Forgery.This issue affects WP Media File Type Manager: from n/a through = 2.3.2...
CVE-2025-27359
Cross-Site Request Forgery CSRF vulnerability in Seerox WP Media File Type Manager wp-media-file-type-manager allows Cross Site Request Forgery.This issue affects WP Media File Type Manager: from n/a through = 2.3.1...
CVE-2025-27359
CVE-2025-27359 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WP Media File Type Manager plugin for WordPress. The issue allows CSRF to be performed against plugin settings, with affected versions listed as up to 2.3.0 (vendor is referenced as WP Media File Type Manager). The ...
PT-2025-24120 · WordPress · Seerox Wp Media File Type Manager
Name of the Vulnerable Software and Affected Versions: Seerox WP Media File Type Manager versions 2.3.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For Seerox WP Media Fi...
CVE-2022-47141
Cross-Site Request Forgery CSRF vulnerability in Seerox WP Dynamic Keywords Injector plugin = 2.3.15 versions...
CVE-2024-32528
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seerox WP Dynamic Keywords Injector allows Reflected XSS.This issue affects WP Dynamic Keywords Injector: from n/a through 2.3.18...
CVE-2024-54256
Missing Authorization vulnerability in Seerox Easy Blocks pro easy-blocks-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Easy Blocks pro: from n/a through = 1.0.21...
CVE-2024-54256
Missing Authorization vulnerability in Seerox Easy Blocks pro easy-blocks-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Easy Blocks pro: from n/a through = 1.0.21...
CVE-2024-54256
CVE-2024-54256 corresponds to a Missing Authorization issue in WordPress plugin Seerox Easy Blocks Pro (versions
PT-2024-36136 · Seerox · Seerox Easy Blocks Pro
Name of the Vulnerable Software and Affected Versions: Seerox Easy Blocks pro versions 1.0.0 through 1.0.21 Description: The issue is related to missing authorization, allowing access to functionality not properly constrained by Access Control Lists ACLs. This means that certain features or...
CVE-2024-32528
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seerox WP Dynamic Keywords Injector allows Reflected XSS.This issue affects WP Dynamic Keywords Injector: from n/a through 2.3.18...
CVE-2024-32528 WordPress WP Dynamic Keywords Injector plugin <= 2.3.18 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seerox WP Dynamic Keywords Injector allows Reflected XSS.This issue affects WP Dynamic Keywords Injector: from n/a through 2.3.18...
CVE-2024-32528 WordPress WP Dynamic Keywords Injector plugin <= 2.3.18 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seerox WP Dynamic Keywords Injector allows Reflected XSS.This issue affects WP Dynamic Keywords Injector: from n/a through 2.3.18...
CVE-2024-32528
CVE-2024-32528 affects the WP Dynamic Keywords Injector (WordPress plugin) and is a reflected XSS due to improper input neutralization during page generation. Affected versions: n/a through 2.3.18. CVSSv3.1 base score 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L). Connected records indicate the issue...
PT-2024-24647 · WordPress · Seerox Wp Dynamic Keywords Injector
Name of the Vulnerable Software and Affected Versions: Seerox WP Dynamic Keywords Injector versions prior to 2.3.19 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations:...
CVE-2022-47141
Cross-Site Request Forgery CSRF vulnerability in Seerox WP Dynamic Keywords Injector plugin = 2.3.15 versions...