PT-2026-109609

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via the user profile 'Author Page' social link contact-method fields author facebook, author twitter, author linkedin, author dribble, author whatsapp, author email in versions...

CVE-2026-63030

creationtimestamp| type| source ---|---|--- 2026-07-17 21:19:56+00:00| seen| https://chaos.social/users/christopherkunz/statuses/116937404931312120 2026-07-17 22:19:07+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mqursxmdqy2o 2026-07-17 22:53:06+00:00| seen|...

CVE-2024-27143

creationtimestamp| type| source ---|---|--- 2026-05-30 14:07:14+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mn37xaxnol23...

CVE-2026-6035

creationtimestamp| type| source ---|---|--- 2026-04-10 10:33:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj54ohahsu23...

EUVD-2026-3146

The Team Section Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user-supplied social network link URLs. This makes it possible for authenticate...

CVE-2024-34546

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Sticky Social Link sticky-social-link allows DOM-Based XSS.This issue affects Sticky Social Link: from n/a through = 2.0.1...

EUVD-2024-43482

Malicious code in bioql PyPI...

EUVD-2024-34849

Malicious code in bioql PyPI...

EUVD-2024-32141

Malicious code in bioql PyPI...

CERTFR-2025-ALE-013

creationtimestamp| type| source ---|---|--- 2025-09-25 17:34:24+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115266136468526536...

CVE-2021-47679

creationtimestamp| type| source ---|---|--- 2025-09-16 17:36:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxucfwfo72u...

CVE-2025-8462

The RT Easy Builder – Advanced addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the social URL parameter in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-8462

The RT Easy Builder – Advanced addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the social URL parameter in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CERTFR-2025-ACT-023

creationtimestamp| type| source ---|---|--- 2025-06-02 12:30:11+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lqmrqg4g5222 2025-06-02 12:30:12+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114613774581208216...

WordPress plugin Team Members has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2025-3521: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social Link icons in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping. This makes i...

CVE-2024-3555

The Social Link Pages: link-in-bio landing pages for your social media profiles plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the importlinkpages function in all versions up to, and including, 1.6.9. This makes it possible for unauthenticated...

CVE-2024-49619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acespritech Social Link Groups social-link-groups allows Blind SQL Injection.This issue affects Social Link Groups: from n/a through = 1.1.0...

CVE-2024-12043

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sociallinktitle' parameter of the 'blog' widget in all versions up to, and including, 3.16.5 due to insufficient...

WordPress plugin Prime Slider has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...