CVE-2026-6864 CBX 5 Star Rating & Review <= 1.0.7 - Reflected Cross-Site Scripting via 'page' Parameter

The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-31409

The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

WordPress plugin CBX 5 Star Rating & Review 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

EUVD-2014-2864

Malware in sbrugna...

EUVD-2009-3936

Malware in sbrugna...

EUVD-2006-6139

Malware in sbrugna...

EUVD-2007-3669

Malware in sbrugna...

EUVD-2006-6138

Malware in sbrugna...

EUVD-2007-3668

Malware in sbrugna...

EUVD-2007-3670

Malware in sbrugna...

EUVD-2017-4348

Malware in sbrugna...

EUVD-2014-2863

Malware in sbrugna...

EUVD-2025-4344

Malicious code in bioql PyPI...

EUVD-2022-49648

Malicious code in bioql PyPI...

EUVD-2023-41741

Malicious code in bioql PyPI...

EUVD-2025-4349

Malicious code in bioql PyPI...

CVE-2023-37867

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: from n/a through 3.3.8...

CVE-2022-46867

Cross-Site Request Forgery CSRF vulnerability in Chasil Universal Star Rating plugin = 2.1.0 version...

CVE-2025-27303

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelogger Contact Form 7 Star Rating contact-form-7-star-rating allows Stored XSS.This issue affects Contact Form 7 Star Rating: from n/a through = 1.10...

WordPress Contact Form 7 Star Rating with font Awesome plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Contact Form 7 Star Rating with font Awesome versions = 1.3...