CVE-2019-11591

The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $POST'action' value and the $GET'action' value, and the latter is...

EUVD-2019-3228

Malware in sbrugna...

EUVD-2018-2576

Malware in sbrugna...

EUVD-2023-49924

Malicious code in bioql PyPI...

EUVD-2024-29034

Malicious code in bioql PyPI...

EUVD-2023-52376

Malicious code in bioql PyPI...

EUVD-2023-50821

Malicious code in bioql PyPI...

EUVD-2023-50351

Malicious code in bioql PyPI...

CVE-2023-45632

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WebDorado SpiderVPlayer plugin = 1.5.22 versions...

CVE-2023-46619

Cross-Site Request Forgery CSRF vulnerability in WebDorado WDSocialWidgets plugin = 1.0.15 versions...

CVE-2023-46090

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WebDorado WDSocialWidgets plugin = 1.0.15 versions...

CVE-2023-48320

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22...

CVE-2019-11557

The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $POST'action' value and the $GET'action' value, and the...

CVE-2024-31123

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderFAQ allows Reflected XSS.This issue affects SpiderFAQ: from n/a through 1.3.2...

CVE-2024-31123

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderFAQ allows Reflected XSS.This issue affects SpiderFAQ: from n/a through 1.3.2...

CVE-2024-31123

CVE-2024-31123 is a reflected XSS vulnerability in WebDorado SpiderFAQ for WordPress. Affected: SpiderFAQ plugin versions up to 1.3.2 (no details on fixed versions in the provided documents). Root cause: Improper neutralization of input during web page generation. Impact: High-severity potential ...

CVE-2024-31123 WordPress SpiderFAQ plugin <= 1.3.2 - Cross Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderFAQ allows Reflected XSS.This issue affects SpiderFAQ: from n/a through 1.3.2...

CVE-2023-48320

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22...

CVE-2023-48320

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22...