PT-2026-43659

Name of the Vulnerable Software and Affected Versions WPComplete versions prior to 2.9.5.5 Description Stored Cross-site Scripting XSS occurs due to improper neutralization of input during web page generation. This allows an attacker to store malicious scripts on the server, which are then execut...

WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WPComplete versions = 2.9.5.3...

CVE-2025-49906

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through = 2.9.5.3...

EUVD-2025-35548

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through = 2.9.5.3...

CVE-2025-49906

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through = 2.9.5.3...

CVE-2025-49906

CVE-2025-49906 affects StellarWP WPComplete (wpcomplete) up to version 2.9.5.3. The vulnerability is due to Missing Authorization, allowing access to functionality not constrained by ACLs. Exploitation details are not provided in the documents, but multiple sources confirm the issue and recommend...

CVE-2025-49906 WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through = 2.9.5.3...

CVE-2025-49906 WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through = 2.9.5.3...

WordPress plugin WPComplete has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-49906: Missing Authorization

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through = 2.9.5.3...

PT-2025-43174

Name of the Vulnerable Software and Affected Versions StellarWP WPComplete versions through 2.9.5.3 Description A missing authorization issue exists in StellarWP WPComplete. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations...

EUVD-2022-48679

Malicious code in bioql PyPI...

EUVD-2025-19019

Malicious code in bioql PyPI...

EUVD-2025-30489

Malicious code in bioql PyPI...

CVE-2025-58974

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5.2...

CVE-2025-58974

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5.2...

WordPress WPComplete Plugin <= 2.9.5.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WPComplete versions = 2.9.5.2...

CVE-2025-58974 WordPress WPComplete Plugin <= 2.9.5.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete allows Stored XSS. This issue affects WPComplete: from n/a through 2.9.5.2...

CVE-2025-58974

CVE-2025-58974 (WPComplete) is a stored cross-site scripting (XSS) vulnerability in the WordPress plugin WPComplete. The CVE entry covers the WPComplete plugin and notes impact on versions up to 2.9.5.2, where improper neutralization of input during web page generation leads to stored XSS. Connec...

CVE-2025-58974 WordPress WPComplete Plugin <= 2.9.5.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through = 2.9.5.2...