EUVD-2025-30307

Malicious code in bioql PyPI...

CVE-2025-9882

The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...

CVE-2025-9882

This CVE refers to the osTicket WP Bridge plugin for WordPress (

CVE-2025-9882 osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...

PT-2025-38634

Name of the Vulnerable Software and Affected Versions osTicket WP Bridge versions up to and including 1.9.2 Description The osTicket WP Bridge plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on a function. This allows unauthenticated...

CVE-2025-31409 WordPress Bridge Core plugin < 3.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Bridge Core allows Stored XSS. This issue affects Bridge Core: from n/a through n/a...

CVE-2025-31409

CVE-2025-31409 concerns Bridge Core, where improper neutralization of input during web page generation enables a Stored XSS. Public data show affected software: Bridge Core (before 3.3.1), with patch applied in version 3.3.1. The CVSS-like metrics report vectors such as AV:N/AC:L/PR:L/UI:R/S:C/C:...

CVE-2025-24744 WordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3...

CVE-2025-24744 WordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3...

WordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Bridge Core versions = 3.3...

WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

Software Bridge Core Type Plugin Vulnerable versions = 3.0.9 Fixed in 3.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-40333 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d3de5f78c548 Credits Rafie Muhammad Patchstack Required...

CVE-2006-6863

CVE-2006-6863 describes a PHP remote file inclusion in the Enigma2.php file of the Enigma WordPress Bridge (Enigma2 plugin). The vulnerability allows remote code execution via a URL parameter in boarddir, but CVE notes indicate boarddir may be fixed, which affects exploitability. Multiple sources...

enigmawp-rfi.txt

----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

CVE-2006-6863

PHP remote file inclusion vulnerability in the Enigma2 plugin Enigma2.php in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value...

Enigma 2 WordPress Bridge (boarddir) Remote File Include Vulnerability

No description provided by source. ----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir...

Enigma 2 WordPress Bridge (boarddir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Enigma 2 WordPress Bridge boarddir Remote File Include Vulnerability ======================================================================...