CVE-2025-63005

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomas WordPress Tooltips wordpress-tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through = 10.9.3...

CVE-2025-63005

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomas WordPress Tooltips wordpress-tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through = 10.9.3...

CVE-2025-63005 WordPress WordPress Tooltips plugin <= 10.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomas WordPress Tooltips wordpress-tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through = 10.9.3...

CVE-2025-63005

CVE-2025-63005 corresponds to the WordPress Tooltips plugin vulnerability. Connected sources confirm a Stored Cross-Site Scripting (XSS) issue in Tooltips for WordPress, affecting versions up to 10.8.3 (i.e.,

CVE-2025-63005 WordPress WordPress Tooltips plugin <= 10.7.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomas WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 10.7.9...

WordPress WordPress Tooltips plugin <= 10.9.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin WordPress Tooltips versions = 10.9.3...

WordPress plugin WordPress Tooltips 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-54294

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomas WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 10.7.9...

CVE-2025-63005: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomas WordPress Tooltips wordpress-tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through = 10.9.3...

EUVD-2023-29872

Malicious code in bioql PyPI...

EUVD-2024-28174

Malicious code in bioql PyPI...

CVE-2023-25985

Cross-Site Request Forgery CSRF vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5...

CVE-2025-32180

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojofywp Product Carousel For WooCommerce – WoorouSell woorousell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through = 1.1.0...

CVE-2024-30243

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5...

CVE-2024-31285

Cross-Site Request Forgery CSRF vulnerability in Tooltip WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 9.5.3...

CVE-2024-31285

Cross-Site Request Forgery CSRF vulnerability in Tooltip WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 9.5.3...

CVE-2024-31285

CVE-2024-31285 is a CSRF vulnerability in the WordPress Tooltips plugin that allows Stored XSS in versions up to and including 9.5.3. The affected product is WordPress Tooltips, with the issue limited to that plugin version range per the description. Patch: upgrade to 9.5.3 or newer to mitigate.

PT-2024-23931 · WordPress · Wordpress Tooltips

Name of the Vulnerable Software and Affected Versions: WordPress Tooltips versions 9.5.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in WordPress Tooltips that allows Stored XSS. Recommendations: For WordPress Tooltips versions 9.5.3 and earlier, update t...

WordPress Tooltips < 9.4.5 - Authenticated (Contributor+) SQL Injection

Description The WordPress Tooltips plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 9.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...

WordPress Tooltips < 9.5.3 - Cross-Site Request Forgery

Description The WordPress Tooltips plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 9.4.9. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform several...