6 matches found
EUVD-2022-24768
Malicious code in bioql PyPI...
EUVD-2022-28896
Malicious code in bioql PyPI...
PT-2023-23883
Name of the Vulnerable Software and Affected Versions Plainware Locatoraid Store Locator plugin versions 3.9.18 and earlier Description The issue is related to a Stored Cross-Site Scripting vulnerability that affects authenticated users, specifically those with subscriber or higher privileges...
CVE-2022-1463
The Booking Calendar plugin for WordPress is vulnerable to PHP Object Injection via the bookingflextimeline shortcode in versions up to, and including, 9.1. This could be exploited by subscriber-level users and above to call arbitrary PHP objects on a vulnerable site...
CVE-2022-1463
The Booking Calendar plugin for WordPress is vulnerable to PHP Object Injection via the bookingflextimeline shortcode in versions up to, and including, 9.1. This could be exploited by subscriber-level users and above to call arbitrary PHP objects on a vulnerable site...
PT-2022-13906
Name of the Vulnerable Software and Affected Versions Booking Calendar plugin for WordPress version 9.1 and earlier Description The issue allows for PHP Object Injection via the bookingflextimeline shortcode. This could be exploited by subscriber-level users and above to call arbitrary PHP object...