423 matches found
EUVD-2025-26970
Malicious code in bioql PyPI...
EUVD-2025-30522
Malicious code in bioql PyPI...
EUVD-2025-30481
Malicious code in bioql PyPI...
EUVD-2025-11669
Malicious code in bioql PyPI...
EUVD-2023-53172
Malicious code in bioql PyPI...
EUVD-2025-32268
Malicious code in bioql PyPI...
EUVD-2022-1545
Malicious code in bioql PyPI...
EUVD-2025-10553
Malicious code in bioql PyPI...
EUVD-2025-11628
Malicious code in bioql PyPI...
EUVD-2025-16517
Malicious code in bioql PyPI...
EUVD-2023-55078
Malicious code in bioql PyPI...
CVE-2025-9080
The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...
CVE-2025-10192
The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppeeffect' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2025-9080 Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...
CVE-2025-9080
CVE-2025-9080 concerns the WordPress plugin Generic Elements. It describes a Stored Cross-Site Scripting (XSS) vulnerability in multiple widget fields caused by insufficient input sanitization and output escaping in versions <= 1.2.4. An attacker with at least contributor-level access can inje...
CVE-2025-10192
CVE-2025-10192 – WP Photo Effects (WordPress) is an authenticated Stored XSS vulnerability in the wppe_effect shortcode affecting all versions up to 1.2.4. The issue arises from insufficient input sanitization and output escaping on user-supplied shortcode attributes, allowing an attacker with co...
PT-2025-40482
Name of the Vulnerable Software and Affected Versions Generic Elements plugin for WordPress versions prior to 1.2.4 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of user-supplied attributes in multiple widget fields...
WordPress plugin WP Photo Effects 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
CVE-2025-58704
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ren Ventura WP Delete User Accounts wp-delete-user-accounts allows Stored XSS.This issue affects WP Delete User Accounts: from n/a through = 1.2.4...
CVE-2025-58681
Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Quotes: from n/a through = 1.2.4...