4 matches found
EUVD-2023-58274
Malicious code in bioql PyPI...
7.3CVSS7.3AI score0.00349EPSS
SaveExploits0References2
EUVD-2024-51127
Malicious code in bioql PyPI...
9.8CVSS9.4AI score0.00566EPSS
SaveExploits0References2
CVE-2023-2446
The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the 'userpro' shortcode in versions up to, and including 5.1.1. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for...
6.5CVSS5.7AI score0.00849EPSS
SaveExploits2References1
CVE-2023-2439
The UserPro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userpro' shortcode in versions up to, and including, 5.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
6.4CVSS5.2AI score0.00332EPSS
SaveExploits0References2
20