CVE-2026-10081

The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched from the Serp API before rendering it in the Google Reviews widget output, allowing unauthenticated attackers who submit a malicious review on the targeted business's Goog...

CVE-2026-10081 Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget

The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched from the Serp API before rendering it in the Google Reviews widget output, allowing unauthenticated attackers who submit a malicious review on the targeted business's Goog...

CVE-2026-10081

The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched from the Serp API before rendering it in the Google Reviews widget output, allowing unauthenticated attackers who submit a malicious review on the targeted business's Goog...

CVE-2026-10081: Improper Neutralization of Input During Web Page Generation

The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched from the Serp API before rendering it in the Google Reviews widget output, allowing unauthenticated attackers who submit a malicious review on the targeted business's Goog...

EUVD-2022-44398

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-_serp (npm)

The package @zalastax/nolb-serp was found to contain malicious code...

MAL-2025-10412 Malicious code in @zalastax/nolb-_serp (npm)

The package @zalastax/nolb-serp was found to contain malicious code...

CVE-2022-41157

A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...

Malicious code in szn-search-mlops-serp-downloader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e35cfed38428b7a513be4c205127136c3ff4884fd2045b3ad9026c9569068c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-3005 Malicious code in szn-search-mlops-serp-downloader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e35cfed38428b7a513be4c205127136c3ff4884fd2045b3ad9026c9569068c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2023-23819

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin = 3.5.201706131 versions...

CVE-2023-23819

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin = 3.5.201706131 versions...

CVE-2023-23819 WordPress itemprop WP for SERP/SEO Rich snippets Plugin <= 3.5.201706131 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin = 3.5.201706131 versions...

CVE-2023-23819

CVE-2023-23819 refers to a Stored XSS in the WordPress plugin “itemprop WP for SERP/SEO Rich snippets” (itempropwp). Affected versions are

CVE-2023-23819: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin = 3.5.201706131 versions...

Malicious Package

Overview eslint-plugin-hermione-serp is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

MAL-2023-313 Malicious code in eslint-plugin-hermione-serp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7d7f41a51ee9bfecbef8bf69e148220d60868373587d28c800ac1acb3e0112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-hermione-serp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7d7f41a51ee9bfecbef8bf69e148220d60868373587d28c800ac1acb3e0112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-41157

A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...

Design/Logic Flaw

A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...