384 matches found
EUVD-2023-58024
Malicious code in bioql PyPI...
EUVD-2021-8677
Malicious code in bioql PyPI...
EUVD-2024-31354
Malicious code in bioql PyPI...
EUVD-2025-21764
Malicious code in bioql PyPI...
EUVD-2025-26990
Malicious code in bioql PyPI...
EUVD-2023-28443
Malicious code in bioql PyPI...
EUVD-2025-2969
Malicious code in bioql PyPI...
CVE-2025-57939
Missing Authorization vulnerability in Blocksera Image Hover Effects – Elementor Addon image-hover-effects-addon-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Hover Effects – Elementor Addon: from n/a through = 1.4.4...
CVE-2025-57939 WordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.4 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Blocksera Image Hover Effects – Elementor Addon image-hover-effects-addon-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Hover Effects – Elementor Addon: from n/a through = 1.4.4...
WordPress plugin Image Hover Effects – Elementor Addon 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blogging sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...
CVE-2025-8318
CVE-2025-8318 affects the WordPress Jobify plugin (versions
WordPress Jobify plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via keyword Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via keyword Parameter vulnerability discovered by Muhammad Yudha - DJ in WordPress Theme Jobify versions = 1.4.4...
PT-2025-37124
The Jobify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘keyword’ parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-58787
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Popup themify-popup allows Stored XSS.This issue affects Themify Popup: from n/a through = 1.4.2...
CVE-2025-58787 WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Popup themify-popup allows Stored XSS.This issue affects Themify Popup: from n/a through = 1.4.2...
CVE-2025-58787
CVE-2025-58787 involves the WordPress plugin Themify Popup. The vulnerability is a stored XSS caused by improper neutralization of input during web page generation, affecting Themify Popup versions up to and including 1.4.4. Exploitation would occur when user-supplied input is stored and later re...
WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin Themify Popup versions = 1.4.2...
WordPress plugin Themify Popup 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2025-36127
Name of the Vulnerable Software and Affected Versions: Themify Popup versions through 1.4.4 Description: Themify Popup contains a stored cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into web...
CVE-2025-54674
Cross-Site Request Forgery CSRF vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Configurator for WooCommerce: from n/a through = 1.4.4...