CVE-2025-12079: Improper Neutralization of Input During Web Page Generation

The WP Twitter Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

EUVD-2025-11773

Malicious code in bioql PyPI...

EUVD-2024-28473

Malicious code in bioql PyPI...

CVE-2024-30553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joby Joseph WP Twitter Mega Fan Box Widget allows Stored XSS.This issue affects WP Twitter Mega Fan Box Widget : from n/a through 1.0...

CVE-2025-39420

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ruudkok WP Twitter Button wp-twitter-button allows Stored XSS.This issue affects WP Twitter Button: from n/a through = 1.4.1...

CVE-2025-39420

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ruudkok WP Twitter Button wp-twitter-button allows Stored XSS.This issue affects WP Twitter Button: from n/a through = 1.4.1...

CVE-2025-39420

CVE-2025-39420 affects the WordPress WP Twitter Button plugin (versions

PT-2025-16987 · WordPress · Wp Twitter Button

Name of the Vulnerable Software and Affected Versions: WP Twitter Button versions 1.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

CVE-2024-30553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joby Joseph WP Twitter Mega Fan Box Widget allows Stored XSS.This issue affects WP Twitter Mega Fan Box Widget : from n/a through 1.0...

CVE-2024-30553

CVE-2024-30553 is a stored XSS in the WP Twitter Mega Fan Box Widget for WordPress. The vulnerability arises from improper input neutralization during web page generation, affecting the WP Twitter Mega Fan Box Widget versions up to 1.0 (older than 1.0). The connected Red Hat advisory confirms the...