2337 matches found
EUVD-2020-15947
Malware in sbrugna...
EUVD-2019-9572
Malware in sbrugna...
EUVD-2019-9569
Malware in sbrugna...
EUVD-2019-9570
Malware in sbrugna...
EUVD-2019-5580
Malware in sbrugna...
EUVD-2015-7266
Malware in sbrugna...
EUVD-2018-1412
Malware in sbrugna...
EUVD-2019-5024
Malware in sbrugna...
EUVD-2020-26926
Malware in sbrugna...
EUVD-2025-32423
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-9243 Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the getccorders and updateorderstatus functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with...
CVE-2025-9243
CVE-2025-9243 affects the WordPress plugin Cost Calculator Builder. A missing capability check in get_cc_orders and update_order_status permits authenticated users with Subscriber-level access (or higher) to access order management and modify order statuses in all versions up to and including 3.5...
CVE-2025-8726 WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-8726
CVE-2025-8726 affects the WordPress plugin WP Photo Album Plus (versions up to and including 9.0.11.006). The vulnerability is a stored XSS in the wppa_user_upload function, exploitable by authenticated users with Subscriber+ privileges, allowing injection of scripts that run in victims’ browsers...
WordPress Constructor plugin <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean vulnerability
Missing Authorization to Authenticated Subscriber+ Theme Clean vulnerability discovered by Sulabh Jain pentestmonkey11 in WordPress Theme Constructor versions = 1.6.5...
EUVD-2024-49407
Malicious code in bioql PyPI...
EUVD-2024-46875
Malicious code in bioql PyPI...
EUVD-2022-4262
Malicious code in bioql PyPI...