114 matches found
PT-2025-43260
Name of the Vulnerable Software and Affected Versions PickPlugins Accordion versions through 2.3.14 Description A missing authorization issue exists in PickPlugins Accordion accordions, allowing exploitation of incorrectly configured access control security levels. Recommendations Versions prior ...
PT-2025-43177
Name of the Vulnerable Software and Affected Versions WPGuppy versions through 1.1.4 Description A missing authorization issue exists in AmentoTech Private Limited WPGuppy wpguppy-lite. This allows access to functionality that is not properly constrained by Access Control Lists ACLs...
PT-2025-43149
Name of the Vulnerable Software and Affected Versions designthemes Insurance versions through 3.5 Description The software contains a flaw due to deserialization of untrusted data, which can lead to object injection. This impacts the Insurance application. Recommendations Update to a version newe...
EUVD-2025-26918
Malicious code in bioql PyPI...
EUVD-2025-25991
Malicious code in bioql PyPI...
EUVD-2025-28060
Malicious code in bioql PyPI...
EUVD-2025-30670
Malicious code in bioql PyPI...
EUVD-2025-30691
Malicious code in bioql PyPI...
EUVD-2025-31307
Malicious code in bioql PyPI...
EUVD-2025-27967
Malicious code in bioql PyPI...
EUVD-2025-24764
Malicious code in bioql PyPI...
CVE-2025-58960
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brijeshk89 IP Based Login ip-based-login allows Stored XSS.This issue affects IP Based Login: from n/a through = 2.4.3...
CVE-2025-57924
Cross-Site Request Forgery CSRF vulnerability in Automattic Developer allows Cross Site Request Forgery. This issue affects Developer: from n/a through 1.2.6...
CVE-2025-58200
Cross-Site Request Forgery CSRF vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through = 0.2...
PT-2025-36805
Name of the Vulnerable Software and Affected Versions: nanbu Welcart e-Commerce versions through 2.11.20 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting XSS. Recommendations: Update nanbu Welcart...
CVE-2025-58821
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdever WP Notification Bell wp-notification-bell allows Stored XSS.This issue affects WP Notification Bell: from n/a through = 1.4.6...
PT-2025-34356 · Unknown · Jeff Starr Simple Statistics For Feeds
Name of the Vulnerable Software and Affected Versions: Jeff Starr Simple Statistics for Feeds versions n/a through 20250322 Description: A Cross-Site Request Forgery CSRF issue exists in Jeff Starr Simple Statistics for Feeds, potentially allowing attackers to perform actions on behalf of...
CVE-2025-53993
CVE-2025-53993 affects Crocoblock JetPopup (WordPress plugin) up to version 2.0.15. The issue is insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Public details across multiple sources confirm the vulnerability, its presence in JetPopup
PT-2025-33952 · Unknown · Dourou Cookie Warning
Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions not specified through 1.3 Description: A Cross-Site Request Forgery CSRF issue exists in Dourou Cookie Warning, allowing attackers to perform Cross-Site Request Forgery attacks. Recommendations: At the moment,...