EUVD-2025-19954

Malicious code in bioql PyPI...

CVE-2025-26591

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam WP fancybox wp-fancybox allows Stored XSS.This issue affects WP fancybox: from n/a through = 1.0.3...

CVE-2025-26591

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam WP fancybox wp-fancybox allows Stored XSS.This issue affects WP fancybox: from n/a through = 1.0.3...

CVE-2025-26591 WordPress WP fancybox plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam WP fancybox wp-fancybox allows Stored XSS.This issue affects WP fancybox: from n/a through = 1.0.3...

CVE-2025-26591

CVE-2025-26591 concerns the WordPress plugin WP fancybox. Public documents confirm a Stored Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation, affecting WP fancybox versions up to 1.0.4. Several connected sources reiterate the same issue a...

CVE-2025-26591 WordPress WP fancybox plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam WP fancybox wp-fancybox allows Stored XSS.This issue affects WP fancybox: from n/a through = 1.0.3...

PT-2025-27873 · WordPress · Wp Fancybox

Name of the Vulnerable Software and Affected Versions: Noor Alam WP fancybox versions 1.0.0 through 1.0.4 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject malicious...