CVE-2026-25422

Cross-Site Request Forgery CSRF vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Extra: from n/a through = 1.2.10...

CVE-2026-25422 WordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Extra: from n/a through = 1.2.10...

CVE-2026-25422

Cross-Site Request Forgery CSRF vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Extra: from n/a through = 1.2.10...

EUVD-2024-44897

Malicious code in bioql PyPI...

EUVD-2025-27728

Malicious code in bioql PyPI...

CVE-2024-38763

Cross-Site Request Forgery CSRF vulnerability in themes4wp Popularis Verse popularis-verse allows Cross Site Request Forgery.This issue affects Popularis Verse: from n/a through = 1.1.1...

CVE-2024-50470

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themes4WP Themes4WP YouTube External Subtitles themes4wp-youtube-external-subtitles allows DOM-Based XSS.This issue affects Themes4WP YouTube External Subtitles: from n/a through = 1.0...

CVE-2025-26867

Missing Authorization vulnerability in Themes4WP Bulk allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk: from n/a through 1.0.11...

CVE-2025-26867

Missing Authorization vulnerability in Themes4WP Bulk allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk: from n/a through 1.0.11...

CVE-2025-26867

CVE-2025-26867 is a Missing Authorization vulnerability affecting WordPress Theme/Plugin: Themes4WP Bulk versions

PT-2025-22021 · Unknown · Themes4Wp Bulk

Name of the Vulnerable Software and Affected Versions: Themes4WP Bulk versions 1.0.11 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 1.0.11 and earlier,...

CVE-2024-38763

Cross-Site Request Forgery CSRF vulnerability in themes4wp Popularis Verse popularis-verse allows Cross Site Request Forgery.This issue affects Popularis Verse: from n/a through = 1.1.1...

CVE-2024-38763

CVE-2024-38763 corresponds to a Cross-Site Forgery vulnerability in Themes4WP Popularis Verse. Affected product/version: Popularis Verse for WordPress, affected up to version 1.1.1 (no versions newer than 1.1.1 identified). Root cause: CSRF vulnerability enabling unauthorized state-changing actio...

CVE-2024-38763 WordPress Popularis Verse theme <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Themes4WP Popularis Verse allows Cross Site Request Forgery.This issue affects Popularis Verse: from n/a through 1.1.1...

CVE-2024-50470

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Themes4WP Themes4WP YouTube External Subtitles allows Stored XSS.This issue affects Themes4WP YouTube External Subtitles: from n/a through 1.0...

CVE-2024-50470

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themes4WP Themes4WP YouTube External Subtitles themes4wp-youtube-external-subtitles allows DOM-Based XSS.This issue affects Themes4WP YouTube External Subtitles: from n/a through = 1.0...

CVE-2024-50470 WordPress Themes4WP YouTube External Subtitles plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themes4WP Themes4WP YouTube External Subtitles themes4wp-youtube-external-subtitles allows DOM-Based XSS.This issue affects Themes4WP YouTube External Subtitles: from n/a through = 1.0...

CVE-2024-50470

CVE-2024-50470 is a Stored XSS vulnerability in the WordPress plugin Themes4WP YouTube External Subtitles (root cause: improper neutralization of input during web page generation). Affected versions are up to 1.0 (no patch information provided). Connected sources indicate low patch priority/no fi...

CVE-2024-50470 WordPress Themes4WP YouTube External Subtitles plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themes4WP Themes4WP YouTube External Subtitles themes4wp-youtube-external-subtitles allows DOM-Based XSS.This issue affects Themes4WP YouTube External Subtitles: from n/a through = 1.0...

PT-2024-34247 · Unknown · Themes4Wp Youtube External Subtitles

Name of the Vulnerable Software and Affected Versions: Themes4WP YouTube External Subtitles versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...