11 matches found
CVE-2023-50836
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ibericode HTML Forms allows Stored XSS.This issue affects HTML Forms: from n/a through 1.3.28...
EUVD-2025-25972
Malicious code in bioql PyPI...
CVE-2025-54733
Missing Authorization vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All Bootstrap Blocks: from n/a through = 1.3.28...
CVE-2025-54733
Missing Authorization vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All Bootstrap Blocks: from n/a through = 1.3.28...
CVE-2025-54733
The CVE-2025-54733 entry concerns the WordPress plugin All Bootstrap Blocks (Miles All Bootstrap Blocks). Public sources in the connected documents confirm a Missing Authorization/Broken Access Control vulnerability affecting All Bootstrap Blocks versions up to and including 1.3.28. The root issu...
CVE-2025-54733 WordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control Vulnerability
Missing Authorization vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All Bootstrap Blocks: from n/a through = 1.3.28...
CVE-2025-54733 WordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control Vulnerability
Missing Authorization vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All Bootstrap Blocks: from n/a through = 1.3.28...
PT-2023-31667 · Unknown · Ibericode Html Forms
Name of the Vulnerable Software and Affected Versions: ibericode HTML Forms versions 1.3.28 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
WordPress Snap Creek Duplicator and Duplicator Pro Path Traversal Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Snap Creek Duplicator is one of the WordPress site migration plugins used in it. A path traversal vulnerability exists in WordPress Sna...
WordPress Duplicator plugin <= 1.3.26 - Unauthenticated Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download vulnerability found in the WordPress Duplicator plugin versions = 1.3.26. Solution Update the WordPress Duplicator plugin to the latest available version at least 1.3.28...
GraphicsMagick Denial of Service Vulnerability - Windows
GraphicsMagick is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...