12065 matches found
CVE-2025-11197: Improper Neutralization of Input During Web Page Generation
The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
EUVD-2025-33661
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
CVE-2025-10124
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
CVE-2025-10124 Booking Manager < 2.1.15 - Contributor+ Booking Deletion
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
CVE-2025-10124 Booking Manager < 2.1.15 - Contributor+ Booking Deletion
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
CVE-2025-10124
The Booking Manager WordPress plugin (versions prior to 2.1.15 ) is vulnerable to unauthorized booking deletion. The root cause is a shortcode that is registered without proper access restrictions, making it accessible to any user with contributor privileges or higher. When a page containing this...
CVE-2025-10124: Undefined Security Weakness
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
WordPress plugin Booking Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-41504
Name of the Vulnerable Software and Affected Versions The Booking Manager WordPress plugin versions prior to 2.1.15 Description The Booking Manager WordPress plugin has an issue where a shortcode capable of deleting bookings is registered and accessible to users with contributor privileges or...
EUVD-2015-9191
Malware in sbrugna...
EUVD-2018-1910
Malware in sbrugna...
EUVD-2014-8859
Malware in sbrugna...
EUVD-2014-4477
Malware in sbrugna...
EUVD-2016-1077
Malware in sbrugna...
EUVD-2021-11324
Malware in sbrugna...
EUVD-2018-20769
Malware in sbrugna...
EUVD-2021-11326
Malware in sbrugna...
EUVD-2019-6323
Malware in sbrugna...