CVE-2025-62986 WordPress FanBridge signup plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in FanBridge FanBridge signup fanbridge-signup allows Stored XSS.This issue affects FanBridge signup: from n/a through = 0.6...

CVE-2025-62986

CVE-2025-62986: Cross-Site Request Forgery (CSRF) in WordPress FanBridge signup plugin (fanbridge-signup) versions &lt;= 0.6 can enable Stored XSS. Public sources in this set identify the affected plugin and the CSRF/XSS combination, with patch status noted as Patched by Wordfence (and Patchstack...

CVE-2025-10135 WP ViewSTL <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP ViewSTL plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'viewstl' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

CVE-2025-62246

CVE-2025-62246 is a stored XSS in Liferay Portal 7.4.x and Liferay DXP (older and unsupported versions) due to improper sanitization of name fields in com.liferay.mentions.web; exploited when a crafted first/mmiddle/last name is rendered in widgets/apps such as page comments, blog comments, docs/...

WordPress Slick Google Map plugin <= 0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Slick Google Map versions = 0.3...

CVE-2025-11197 Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

EUVD-2020-23936

Malware in sbrugna...

EUVD-2020-23940

Malware in sbrugna...

EUVD-2020-23937

Malware in sbrugna...

EUVD-2020-23941

Malware in sbrugna...

EUVD-2020-23939

Malware in sbrugna...

EUVD-2021-24920

Malware in sbrugna...

EUVD-2020-23943

Malware in sbrugna...

EUVD-2025-24887

Malicious code in bioql PyPI...

EUVD-2025-26925

Malicious code in bioql PyPI...

EUVD-2025-26933

Malicious code in bioql PyPI...

CVE-2025-60173 WordPress GST for WooCommerce Plugin <= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ashwani kumar GST for WooCommerce gst-for-woocommerce allows Stored XSS.This issue affects GST for WooCommerce: from n/a through = 2.0...

CVE-2025-60124 WordPress Simple Colorbox Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Hellyer Simple Colorbox simple-colorbox allows Stored XSS.This issue affects Simple Colorbox: from n/a through = 1.6.1...

CVE-2025-57918 WordPress LinkedInclude Plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ERA404 LinkedInclude linkedinclude allows Stored XSS.This issue affects LinkedInclude: from n/a through = 3.0.4...

CVE-2025-57932

PowerFolio (Portfolio & Image Gallery for Elementor) is affected by a Stored Cross-Site Scripting (XSS) in the plugin’s web page generation due to improper input neutralization. Affected versions are PowerFolio up to 3.2.1; exploitation requires an authenticated user (Contributor+). The issue has...