PT-2026-103299

Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4...

EUVD-2025-2801

Malicious code in bioql PyPI...

EUVD-2023-56198

Malicious code in bioql PyPI...

CVE-2025-22521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Farrell wp Hosting Performance Check wp-hosting-performance-check allows Reflected XSS.This issue affects wp Hosting Performance Check: from n/a through = 2.18.8...

CVE-2025-22521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Farrell wp Hosting Performance Check wp-hosting-performance-check allows Reflected XSS.This issue affects wp Hosting Performance Check: from n/a through = 2.18.8...

CVE-2025-22521

CVE-2025-22521 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin wp Hosting Performance Check. The issue affects the plugin version range listed as from n/a through 2.18.8. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with a base score of 7....

PT-2025-4514

Name of the Vulnerable Software and Affected Versions wp Hosting Performance Check versions n/a through 2.18.8 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS. Recommendations For ...

CVE-2025-22521: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Farrell wp Hosting Performance Check wp-hosting-performance-check allows Reflected XSS.This issue affects wp Hosting Performance Check: from n/a through = 2.18.8...

CVE-2023-51485

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Hosting Pay with Vipps and MobilePay for WooCommerce allows Stored XSS.This issue affects Pay with Vipps and MobilePay for WooCommerce: from n/a through 1.14.13...

CVE-2023-51485

CVE-2023-51485 is a Cross-Site Scripting (Stored XSS) vulnerability in the WordPress plugin “Pay with Vipps for WooCommerce” (WP Pay with Vipps). The issue arises from improper neutralization of user input during web page generation, allowing stored XSS. Affected versions are up to 1.14.13 (inclu...

CVE-2023-51485: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Hosting Pay with Vipps and MobilePay for WooCommerce allows Stored XSS.This issue affects Pay with Vipps and MobilePay for WooCommerce: from n/a through 1.14.13...