EUVD-2021-11380

Malware in sbrugna...

EUVD-2021-11737

Malware in sbrugna...

EUVD-2021-11415

Malware in sbrugna...

EUVD-2021-11478

Malware in sbrugna...

EUVD-2021-11873

Malware in sbrugna...

EUVD-2021-11320

Malware in sbrugna...

EUVD-2021-11738

Malware in sbrugna...

EUVD-2021-11762

Malware in sbrugna...

EUVD-2018-8136

Malware in sbrugna...

EUVD-2021-11383

Malware in sbrugna...

EUVD-2019-7031

Malware in sbrugna...

EUVD-2015-9161

Malware in sbrugna...

EUVD-2021-11327

Malware in sbrugna...

EUVD-2021-11328

Malware in sbrugna...

PT-2025-44370

Name of the Vulnerable Software and Affected Versions Blocksy Companion plugin for WordPress versions up to and including 2.1.14 Description The Blocksy Companion plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'blocksy newsletter subscribe' shortcode. This is due t...

CVE-2025-9876

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9875

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2025-9130

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9858

The Auto Bulb Finder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abfvehicle' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2025-9199

The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...