631 matches found
CVE-2025-4203
The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...
CVE-2025-4203 wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Function
The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...
CVE-2025-4203 wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Function
The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...
CVE-2025-4203
This CVE refers to wpForo Forum (WordPress) ≤ 2.4.8, exposed to error-based or time-based SQL Injection via get_members due to missing integer validation on offset and row_count. The code interpolates row_count into LIMIT offset,row_count using esc_sql(), allowing attacker-controlled input to tri...
WordPress wpForo Forum plugin <= 2.4.8 - Unauthenticated SQL Injection via get_members Function vulnerability
Unauthenticated SQL Injection via getmembers Function vulnerability discovered by mikemyers in WordPress Plugin wpForo Forum versions = 2.4.8...
PT-2025-43725
Name of the Vulnerable Software and Affected Versions wpForo Forum versions prior to 2.4.9 Description The wpForo Forum plugin for WordPress is susceptible to error-based or time-based SQL Injection through the get members function. This is due to a lack of integer validation on the offset and ro...
CVE-2025-4203: Improper Neutralization of Special Elements used in an SQL Command
The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...
EUVD-2018-3728
Malware in sbrugna...
EUVD-2019-8747
Malware in sbrugna...
EUVD-2019-8748
Malware in sbrugna...
EUVD-2021-11318
Malware in sbrugna...
EUVD-2018-3544
Malware in sbrugna...
EUVD-2019-8745
Malware in sbrugna...
EUVD-2018-8420
Malware in sbrugna...
EUVD-2019-8746
Malware in sbrugna...
EUVD-2025-26569
Malicious code in bioql PyPI...
EUVD-2024-31792
Malicious code in bioql PyPI...
EUVD-2022-40746
Malicious code in bioql PyPI...