9 matches found
EUVD-2025-4228
Malicious code in bioql PyPI...
CVE-2025-26572
Cross-Site Request Forgery CSRF vulnerability in jesseheap WP PHPList phplist-form-integration allows Cross Site Request Forgery.This issue affects WP PHPList: from n/a through = 1.7...
CVE-2025-26572
Cross-Site Request Forgery CSRF vulnerability in jesseheap WP PHPList phplist-form-integration allows Cross Site Request Forgery.This issue affects WP PHPList: from n/a through = 1.7...
CVE-2025-26572
CVE-2025-26572 affects the WP PHPList plugin for WordPress (versions n/a through 1.7). The issue is a Cross-Site Request Forgery (CSRF) vulnerability that can lead to Stored Cross-Site Scripting (XSS). According to Patchstack/Wo rdfence references, the patch status is Unpatched for WP PHPList
CVE-2025-26572 WordPress WP PHPList Plugin <= 1.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in jesseheap WP PHPList phplist-form-integration allows Cross Site Request Forgery.This issue affects WP PHPList: from n/a through = 1.7...
CVE-2025-26572 WordPress WP PHPList Plugin <= 1.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in jesseheap WP PHPList allows Cross Site Request Forgery. This issue affects WP PHPList: from n/a through 1.7...
PT-2025-7196 · Unknown · Wp Phplist
Name of the Vulnerable Software and Affected Versions: WP PHPList versions n/a through 1.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user into...
WordPress WP-PHPList Plugin 2.10.2 'unsubscribeemail' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37096/info The WP-PHPList plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
WordPress Plugin WP-phpList 2.10.2 - unsubscribeemail Cross-Site Scripting
WordPress Plugin WP-phpList 2.10.2 - unsubscribeemail Cross-Site Scripting source: https://www.securityfocus.com/bid/37096/info The WP-PHPList plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker...