9 matches found
EUVD-2025-9139
Malicious code in bioql PyPI...
CVE-2025-31906
Cross-Site Request Forgery CSRF vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows Stored XSS.This issue affects WP Profitshare: from n/a through = 1.4.9...
CVE-2025-31906
Cross-Site Request Forgery CSRF vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows Stored XSS.This issue affects WP Profitshare: from n/a through = 1.4.9...
CVE-2025-31906 WordPress WP Profitshare Plugin <= 1.4.9 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in ProfitShare.ro WP Profitshare allows Stored XSS. This issue affects WP Profitshare: from n/a through 1.4.9...
CVE-2025-31906
CVE-2025-31906 is a WP Profitshare vulnerability: Cross-Site Request Forgery (CSRF) that enables Stored XSS in the WP Profitshare plugin. Public details in connected docs show affected product WP Profitshare, versions up to 1.4.9, with the title listing “Cross-Site Request Forgery to Stored Cross...
CVE-2025-30525
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows SQL Injection.This issue affects WP Profitshare: from n/a through = 1.4.9...
CVE-2025-30525
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows SQL Injection.This issue affects WP Profitshare: from n/a through = 1.4.9...
CVE-2025-30525 WordPress WP Profitshare plugin <= 1.4.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows SQL Injection.This issue affects WP Profitshare: from n/a through = 1.4.9...
CVE-2025-30525
CVE-2025-30525 describes an SQL injection in the WP Profitshare plugin for WordPress. Public sources in Connected documents indicate the vulnerability affects WP Profitshare up to version 1.4.9 and is exploitable without authentication for some access levels (per the Wordfence vulnerability entry...