27 matches found
EUVD-2025-19391
Malicious code in bioql PyPI...
EUVD-2023-51638
Malicious code in bioql PyPI...
EUVD-2023-51639
Malicious code in bioql PyPI...
CVE-2025-9034 Wp Edit Password Protected < 1.3.5 - Open Redirect
The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...
CVE-2025-53253
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh WP Edit wp-edit allows Stored XSS.This issue affects WP Edit: from n/a through = 4.0.4...
CVE-2025-53253
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh WP Edit wp-edit allows Stored XSS.This issue affects WP Edit: from n/a through = 4.0.4...
CVE-2025-53253 WordPress WP Edit plugin <= 4.0.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh WP Edit wp-edit allows Stored XSS.This issue affects WP Edit: from n/a through = 4.0.4...
CVE-2025-53253
CVE-2025-53253 maps to WP Edit (WordPress plugin)
CVE-2025-53253 WordPress WP Edit plugin <= 4.0.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh WP Edit wp-edit allows Stored XSS.This issue affects WP Edit: from n/a through = 4.0.4...
PT-2025-27160 · WordPress · Wp Edit
Name of the Vulnerable Software and Affected Versions: WP Edit versions 4.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...
WordPress plugin WP Edit 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
CVE-2023-47528
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...
CVE-2023-47527
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...
CVE-2022-2275
The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack...
CVE-2023-47527
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...
CVE-2023-47527
CVE-2023-47527 involves the WP Edit Username WordPress plugin and is a stored cross-site scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Affected versions are listed as from n/a through 1.0.5. The connected Red Hat CVE record (RH:CVE-2023-47527) c...
CVE-2023-47528
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...
CVE-2023-47528
CVE-2023-47528 concerns the WP Edit Username WordPress plugin (
CVE-2023-47528 WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...