crud 代码注入漏洞

crud is a minimalist backend management system developed by Yang Youwang, an individual developer in China. A code injection vulnerability exists in crud version 1.0.0, which originates from a cross-site scripting attack...

WordPress plugin Gotcha | Gesture-based Captcha 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

crud 代码注入漏洞

crud is a minimalist backend management system by the individual developer Yang Youwang in China. A code injection vulnerability exists in crud version 1.0.0, which stems from improper operation of the Role Management Page component and could lead to a cross-site scripting attack...

WordPress plugin Bitspecter Suite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

WordPress Schedule Plugin <= 1.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Schedule versions = 1.0.0...

VBlog 代码注入漏洞

VBlog is a multi-user blog management platform for lenve individual developers. A code injection vulnerability exists in VBlog 1.0.0 and earlier versions, which originates from cross-site scripting and could lead to a remote attacker executing arbitrary script in a user's browser...

VBlog 路径遍历漏洞

VBlog is a multi-user blog management platform for lenve individual developers. A path traversal vulnerability exists in VBlog 1.0.0 and earlier versions, which stems from a path traversal that could allow a remote attacker to access arbitrary files...

CVE-2025-25225 Extension - hikashop.com - Privilege escalation vulnerability Hikashop component version 1.0.0 - 5.1.3 for Joomla

A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers administrator to escalate their privileges to Super Admin Permissions...

HikaShop 访问控制错误漏洞

HikaShop is a complete e-commerce solution from HikaShop, Inc. that makes it easy to create and manage online stores. A security vulnerability exists in HikaShop versions 1.0.0 through 5.1.3 that stems from elevation of privilege...

WordPress plugin Schedule 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2025-11149 · WordPress · Scheduler

Name of the Vulnerable Software and Affected Versions: Schedule WordPress plugin version 1.0.0 Description: The issue concerns a Reflected Cross-Site Scripting vulnerability. It occurs because the Schedule WordPress plugin does not properly sanitise and escape a parameter before outputting it bac...

CVE-2025-27263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows SQL Injection.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

Malicious code in adyenaddon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4954f0f5ce68df460bab2cdeec79f35ea8d3aa5eac320bf43ed08d72b1495d0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-23738

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Padam Shankhadev Ps Ads Pro ps-ads-pro allows Reflected XSS.This issue affects Ps Ads Pro: from n/a through = 1.0.0...

CVE-2025-27263 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows SQL Injection.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27263

CVE-2025-27263 covers a SQL Injection in WordPress plugin Doctor Appointment Booking (NotFound Doctor Appointment Booking). Affected: Doctor Appointment Booking versions n/a through 1.0.0. Root cause: improper neutralization of input in SQL commands. Impact: confidentiality impact High (as per CV...

CVE-2025-25083

Summary: CVE-2025-25083 affects the WordPress EP4 More Embeds plugin (versions &lt;= 1.0.0). The vulnerability is a Stored Cross-Site Scripting (XSS) caused by improper neutralization of input during web page generation. Affected software: WordPress EP4 More Embeds plugin (

CVE-2025-23738 WordPress Ps Ads Pro plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Padam Shankhadev Ps Ads Pro ps-ads-pro allows Reflected XSS.This issue affects Ps Ads Pro: from n/a through = 1.0.0...

CVE-2025-23538 WordPress WP Contest plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound WP Contest allows Reflected XSS. This issue affects WP Contest: from n/a through 1.0.0...

CVE-2025-23538

The CVE refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress WP Contest plugin, affecting versions up to 1.0.0. The root cause is improper neutralization of input during web page generation, enabling reflected XSS. Connected sources consistently describe the issue and l...