CVE-2026-1714

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions up to, and including, 3.3.2. This is due to the lack of validation on the 'sendto', 'producttitle', 'wlmessage', and 'wlemail'...

CVE-2026-1714

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions up to, and including, 3.3.2. This is due to the lack of validation on the 'sendto', 'producttitle', 'wlmessage', and 'wlemail'...

EUVD-2022-3129

Malicious code in bioql PyPI...

Malicious code in terminal-suggest (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41409 Malicious code in terminal-suggest (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in yelp_search_suggest (npm)

The package yelpsearchsuggest was found to contain malicious code...

MAL-2025-40449 Malicious code in yelp_search_suggest (npm)

The package yelpsearchsuggest was found to contain malicious code...

de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.19.11)

org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2024-52979 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2024-52979 Source...

com.sonian:elasticsearch-equilibrium (0.20.0), com.sonian:elasticsearch-jetty (>=0.20.0, <=0.20.1) +2 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.20.2)

org.elasticsearch:elasticsearch MAVEN version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sonian:elasticsearch-equilibrium 0.20.0 - com.sonian:elasticsearch-jetty =0.20.0, =0.20.2-0....

XWiki SearchSuggestSourceClass Data Compromise

The vulnerability of the XWiki.SearchSuggestSourceClass in the XWiki platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.19.11)

org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2024-43709 Source...

com.clever-age:play2-elasticsearch (0.8.2), com.github.joschi:dropwizard-elasticsearch (0.1.1) +1 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.90.12)

org.elasticsearch:elasticsearch MAVEN version 0.90.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.clever-age:play2-elasticsearch 0.8.2 - com.github.joschi:dropwizard-elasticsearch 0.1.1 -...

de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.19.11)

org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2024-23444 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2024-23444 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.19.11)

org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2023-49921 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2023-49921 Source...

Insecure Deserialization

TYPO3 is vulnerable to Insecure Deserialization. The vulnerability is due to failing to properly validate incoming data in the suggest wizard, which allows an attacker to exploit insecure unserialize operations. A valid backend user account is required to exploit this vulnerability...

PT-2024-40238

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The suggest wizard is susceptible to insecure unserialize due to failing to properly validate incoming data. A valid backend user account is needed to exploit this issue...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2023-31418 Source...