EUVD-2023-54639

Malicious code in bioql PyPI...

EUVD-2022-42771

Malicious code in bioql PyPI...

PT-2025-32096 · WordPress · Reveal Listing

Name of the Vulnerable Software and Affected Versions: Reveal Listing plugin for WordPress versions up to and including 3.3 Description: The Reveal Listing plugin for WordPress allows users registering new accounts to set their own role via the listing user role field. This enables unauthenticate...

CVE-2024-1330

Kadence Blocks Pro for WordPress

Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. PoC 1. Insert...