CVE-2024-2439

The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

EUVD-2024-50161

Malicious code in bioql PyPI...

EUVD-2024-17579

Malicious code in bioql PyPI...

EUVD-2022-52050

Malicious code in bioql PyPI...

EUVD-2024-33051

Malicious code in bioql PyPI...

EUVD-2024-32557

Malicious code in bioql PyPI...

EUVD-2023-54355

Malicious code in bioql PyPI...

EUVD-2024-27404

Malicious code in bioql PyPI...

EUVD-2023-44054

Malicious code in bioql PyPI...

EUVD-2024-46837

Malicious code in bioql PyPI...

EUVD-2024-49702

Malicious code in bioql PyPI...

EUVD-2024-33819

Malicious code in bioql PyPI...

EUVD-2024-49774

Malicious code in bioql PyPI...

EUVD-2024-49330

Malicious code in bioql PyPI...

EUVD-2024-32965

Malicious code in bioql PyPI...

EUVD-2024-32455

Malicious code in bioql PyPI...

EUVD-2023-57394

Malicious code in bioql PyPI...

EUVD-2024-32540

Malicious code in bioql PyPI...

CVE-2025-6259 esri-map-view <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via esri-map-view Shortcode

The esri-map-view plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's esri-map-view shortcode in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-6387 WP Get The Table <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter

The WP Get The Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...