87 matches found
PT-2026-57954
The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the customer-area-protected-content shortcode in all versions up to, and including, 8.3.5. This is due to insufficient input sanitization and output escaping on the shortcode...
CVE-2026-13731
The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.4.9 due to insufficient input sanitization and output escaping. This makes it possible f...
CVE-2026-4083
The CVE concerns the WordPress plugin Scoreboard for HTML5 Games Lite (up to version 1.2). The root cause is in the shortcode handling function sfhg_shortcode(), which allows arbitrary HTML attributes to be added to the rendered despite a small blacklist, because escaping is insufficient for eve...
CVE-2024-2801
The Shopkeeper Extender plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'imageslide' shortcode in all versions up to, and including, 3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
PT-2026-1585
Name of the Vulnerable Software and Affected Versions ACF to REST API plugin for WordPress versions through 3.3.4 Description The ACF to REST API plugin for WordPress is affected by an Insecure Direct Object Reference issue. Insufficient capability checks in the update item permissions check meth...
CVE-2025-13731
The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nxt-year' shortcode in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
WordPress Analytify Pro plugin <= 7.0.3 - Unauthenticated Information Exposure vulnerability
Unauthenticated Information Exposure vulnerability discovered by WPBrigade Support in WordPress Plugin Analytify Pro versions = 7.0.3...
EUVD-2017-9700
Malware in sbrugna...
EUVD-2017-9476
Malware in sbrugna...
EUVD-2021-11861
Malware in sbrugna...
EUVD-2018-17438
Malware in sbrugna...
EUVD-2020-30320
Malware in sbrugna...
EUVD-2024-17328
Malicious code in bioql PyPI...
EUVD-2024-16247
Malicious code in bioql PyPI...
EUVD-2024-43967
Malicious code in bioql PyPI...
EUVD-2025-5308
Malicious code in bioql PyPI...
EUVD-2025-7195
Malicious code in bioql PyPI...
EUVD-2025-6718
Malicious code in bioql PyPI...