9356 matches found
CVE-2025-9560 Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's colibrinewsletter shortcode in all versions up to, and including, 1.0.334 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
PT-2025-41646
Name of the Vulnerable Software and Affected Versions Enable Media Replace plugin for WordPress versions up to and including 4.1.6 Description The software is susceptible to Stored Cross-Site Scripting through the file modified shortcode. Insufficient input sanitization and output escaping on...
PT-2025-41663
Name of the Vulnerable Software and Affected Versions Stock History & Reports Manager for WooCommerce plugin for WordPress versions up to and including 2.2.1 Description The Stock History & Reports Manager for WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through...
PT-2025-41665
Name of the Vulnerable Software and Affected Versions WP Easy Toggles versions prior to 1.9.1 Description The WP Easy Toggles plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'toggles' shortcode. This is due to inadequate input sanitization and output escaping of...
PT-2025-41675
Name of the Vulnerable Software and Affected Versions Easy Plugin Stats versions prior to 2.0.2 Description The Easy Plugin Stats plugin for WordPress has a flaw that allows malicious code to be stored and executed when a user views a page containing the injected code. This is due to a lack of...
PT-2025-41643
Name of the Vulnerable Software and Affected Versions Draft List plugin for WordPress versions prior to 2.6.1 Description The software contains a flaw due to insufficient input sanitization and output escaping on user supplied attributes within the 'drafts' shortcode. This allows authenticated...
PT-2025-41631
Name of the Vulnerable Software and Affected Versions Colibri Page Builder plugin for WordPress versions through 1.0.334 Description The Colibri Page Builder plugin for WordPress is susceptible to Stored Cross-Site Scripting through the colibri newsletter shortcode. This is due to inadequate inpu...
WordPress plugin Live Webcam Widget & Shortcode 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-41662
Name of the Vulnerable Software and Affected Versions WordPress Live Webcam Widget & Shortcode plugin versions prior to 1.3 Description The WordPress Live Webcam Widget & Shortcode plugin is susceptible to Stored Cross-Site Scripting through the 'webcam' shortcode. Insufficient input sanitization...
EUVD-2025-33661
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
CVE-2025-10124
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
CVE-2025-10124 Booking Manager < 2.1.15 - Contributor+ Booking Deletion
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
CVE-2025-10124
CVE-2025-10124 concerns the Booking Manager WordPress plugin, version
CVE-2025-10124 Booking Manager < 2.1.15 - Contributor+ Booking Deletion
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
WordPress plugin Booking Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-41504
Name of the Vulnerable Software and Affected Versions The Booking Manager WordPress plugin versions prior to 2.1.15 Description The Booking Manager WordPress plugin has an issue where a shortcode capable of deleting bookings is registered and accessible to users with contributor privileges or...
EUVD-2021-11383
Malware in sbrugna...
EUVD-2021-11737
Malware in sbrugna...