12178 matches found
CVE-2025-22497
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bramwaas Simple Google Calendar Outlook Events Block Widget simple-google-icalendar-widget allows Stored XSS.This issue affects Simple Google Calendar Outlook Events Block Widget: from n/a through ...
CVE-2025-22497
CVE-2025-22497 affects WordPress plugin Simple Google Calendar Outlook Events Widget (
CVE-2025-30819
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Igor Benic Simple Giveaways giveasap allows SQL Injection.This issue affects Simple Giveaways: from n/a through = 2.48.1...
WordPress Simple Giveaways plugin <= 2.48.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Simple Giveaways versions = 2.48.1...
CVE-2025-30819
CVE-2025-30819 describes an SQL Injection vulnerability in the Simple Giveaways WordPress plugin. Affected versions are Simple Giveaways up to 2.48.1 (no details on prior versions provided). The vulnerability is categorized as an authenticated SQL Injection with a CVSS v3.1 base score of 8.5 (ATT...
CVE-2025-30819 WordPress Simple Giveaways plugin <= 2.48.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Igor Benic Simple Giveaways giveasap allows SQL Injection.This issue affects Simple Giveaways: from n/a through = 2.48.1...
CVE-2025-30819 WordPress Simple Giveaways plugin <= 2.48.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Igor Benic Simple Giveaways giveasap allows SQL Injection.This issue affects Simple Giveaways: from n/a through = 2.48.1...
CVE-2024-12769
The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress plugin Simple Giveaways SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2025-13094 · Igor Benic · Igor Benic Simple Giveaways
Name of the Vulnerable Software and Affected Versions: Igor Benic Simple Giveaways versions 2.48.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows unauthorized access...
CVE-2025-28934
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chaozh Simple Post Series simple-post-series allows Reflected XSS.This issue affects Simple Post Series: from n/a through = 2.4.4...
CVE-2025-26576
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in takumin WP Simple Slideshow wp-simple-slideshow allows Reflected XSS.This issue affects WP Simple Slideshow: from n/a through = 1.0...
CVE-2025-23459
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NsThemes NS Simple Intro Loader ns-simple-intro-loader allows Reflected XSS.This issue affects NS Simple Intro Loader: from n/a through = 2.2.3...
CVE-2025-26929
CVE-2025-26929 is a stored XSS vulnerability in the WordPress plugin Accounting for WooCommerce (
CVE-2025-30538
Cross-Site Request Forgery CSRF vulnerability in ChrisHurst Simple Optimizer simple-optimizer allows Cross Site Request Forgery.This issue affects Simple Optimizer: from n/a through = 1.2.7...
CVE-2025-30523
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Marcel-NL Super Simple Subscriptions super-simple-subscriptions allows SQL Injection.This issue affects Super Simple Subscriptions: from n/a through = 1.1.0...
CVE-2025-30572
Cross-Site Request Forgery CSRF vulnerability in Igor Yavych Simple Rating simple-rating allows Stored XSS.This issue affects Simple Rating: from n/a through = 1.4...
CVE-2025-28934 WordPress Simple Post Series plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chaozh Simple Post Series simple-post-series allows Reflected XSS.This issue affects Simple Post Series: from n/a through = 2.4.4...
CVE-2025-28934 WordPress Simple Post Series plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chaozh Simple Post Series simple-post-series allows Reflected XSS.This issue affects Simple Post Series: from n/a through = 2.4.4...