133 matches found
EUVD-2025-9103
Malicious code in bioql PyPI...
EUVD-2023-0603
Malicious code in bioql PyPI...
EUVD-2023-0617
Malicious code in bioql PyPI...
EUVD-2022-0255
Malicious code in bioql PyPI...
EUVD-2025-5347
Malicious code in bioql PyPI...
EUVD-2025-5344
Malicious code in bioql PyPI...
CVE-2025-58019
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Search Atlas Group Search Atlas SEO metasync allows Stored XSS.This issue affects Search Atlas SEO: from n/a through = 2.5.4...
PT-2025-38869
Name of the Vulnerable Software and Affected Versions Search Atlas SEO versions through 2.5.4 Description A flaw exists in Search Atlas SEO that allows for Stored Cross-site Scripting XSS. This issue involves improper neutralization of input during web page generation. The vulnerability could...
WordPress Booking and Rental Manager plugin <= 2.5.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Booking and Rental Manager versions = 2.5.4...
CVE-2025-7718
The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email...
CVE-2025-7718 Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover
The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email...
CVE-2025-7718 Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover
The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email...
WordPress Resideo Plugin for Resideo - Real Estate WordPress Theme plugin <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover vulnerability
WordPress Resideo Plugin for Resideo - Real Estate WordPress Theme plugin = 2.5.4 - Authenticated Subscriber+ Insecure Direct Object Reference to Privilege Escalation via Account Takeover vulnerability discovered by Alyudin Nafiie in WordPress Plugin Resideo Plugin for Resideo versions = 2.5.4...
DEBIAN-CVE-2025-7783
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...
WordPress plugin All-in-One Addons for Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-49074
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Abu Huraira Bin Aman WidgetKit widgetkit-for-elementor allows Stored XSS.This issue affects WidgetKit: from n/a through = 2.5.4...
CVE-2025-49074
CVE-2025-49074 corresponds to a Stored XSS in the WordPress WidgetKit plugin (WidgetKit
CVE-2024-43928
Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4...