494 matches found
PT-2025-44709
Name of the Vulnerable Software and Affected Versions wpForo Forum plugin for WordPress versions through 2.4.9 Description The wpForo Forum plugin for WordPress is susceptible to SQL Injection through the Subscriptions Manager. Insufficient escaping of user-supplied parameters and inadequate...
CVE-2025-4203
The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...
WordPress plugin wpForo Forum SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...
CVE-2025-4203
The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...
CVE-2025-4203 wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Function
The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...
CVE-2025-4203 wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Function
The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...
CVE-2025-4203
This CVE refers to wpForo Forum (WordPress) ≤ 2.4.8, exposed to error-based or time-based SQL Injection via get_members due to missing integer validation on offset and row_count. The code interpolates row_count into LIMIT offset,row_count using esc_sql(), allowing attacker-controlled input to tri...
WordPress wpForo Forum plugin <= 2.4.8 - Unauthenticated SQL Injection via get_members Function vulnerability
Unauthenticated SQL Injection via getmembers Function vulnerability discovered by mikemyers in WordPress Plugin wpForo Forum versions = 2.4.8...
PT-2025-43725
Name of the Vulnerable Software and Affected Versions wpForo Forum versions prior to 2.4.9 Description The wpForo Forum plugin for WordPress is susceptible to error-based or time-based SQL Injection through the get members function. This is due to a lack of integer validation on the offset and ro...
EUVD-2019-8745
Malware in sbrugna...
EUVD-2019-8748
Malware in sbrugna...
EUVD-2019-8746
Malware in sbrugna...
EUVD-2018-3544
Malware in sbrugna...
EUVD-2019-8747
Malware in sbrugna...
EUVD-2018-8420
Malware in sbrugna...
EUVD-2018-3728
Malware in sbrugna...
EUVD-2021-11318
Malware in sbrugna...
EUVD-2025-16744
Malicious code in bioql PyPI...