EUVD-2024-42348

Malicious code in bioql PyPI...

EUVD-2023-31210

Malicious code in bioql PyPI...

EUVD-2023-30311

Malicious code in bioql PyPI...

CVE-2023-27434

Cross-Site Request Forgery CSRF vulnerability in WPGrim Classic Editor and Classic Widgets plugin = 1.2.5 versions...

CVE-2024-47312

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Grim Classic Editor and Classic Widgets classic-editor-and-classic-widgets allows SQL Injection.This issue affects Classic Editor and Classic Widgets: from n/a through = 1.4.1...

CVE-2024-47312

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Grim Classic Editor and Classic Widgets classic-editor-and-classic-widgets allows SQL Injection.This issue affects Classic Editor and Classic Widgets: from n/a through = 1.4.1...

CVE-2024-47312 WordPress Classic Editor and Classic Widgets plugin <= 1.4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Grim Classic Editor and Classic Widgets classic-editor-and-classic-widgets allows SQL Injection.This issue affects Classic Editor and Classic Widgets: from n/a through = 1.4.1...

CVE-2024-47312

CVE-2024-47312 : SQL Injection in WordPress plugins “Classic Editor” and “Classic Widgets” (WPGrim) up to version 1.4.1. Root cause: improper neutralization of input in SQL queries, enabling attacker-controlled SQL when authenticated as a Subscriber. Affected: Classic Editor and Classic Widgets (...

CVE-2024-47312 WordPress Classic Editor and Classic Widgets plugin <= 1.4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Grim Classic Editor and Classic Widgets classic-editor-and-classic-widgets allows SQL Injection.This issue affects Classic Editor and Classic Widgets: from n/a through = 1.4.1...

PT-2024-32524 · Unknown · Classic Widgets +1

Name of the Vulnerable Software and Affected Versions: WPGrim Classic Editor and Classic Widgets versions 1.4.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to...

CVE-2023-27434

Cross-Site Request Forgery CSRF vulnerability in WPGrim Classic Editor and Classic Widgets plugin = 1.2.5 versions...

CVE-2023-27434

Cross-Site Request Forgery CSRF vulnerability in WPGrim Classic Editor and Classic Widgets plugin = 1.2.5 versions...

CVE-2023-26514

Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPGrim Classic Editor and Classic Widgets plugin = 1.2.5 versions...

CVE-2023-26514

CVE-2023-26514 is a CSRF vulnerability in the WordPress plugin WPGrim Dynamic XML Sitemaps Generator for Google (versions

CVE-2023-27434

CVE-2023-27434 affects WPGrim Classic Editor and Classic Widgets plugin (versions

CVE-2023-27434 WordPress Classic Editor and Classic Widgets Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPGrim Classic Editor and Classic Widgets plugin = 1.2.5 versions...

PT-2023-21123 · WordPress · Wpgrim Classic Editor/Classic Widgets

Name of the Vulnerable Software and Affected Versions: WPGrim Classic Editor and Classic Widgets plugin versions 1.2.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-20693 · WordPress · Wpgrim Dynamic Xml Sitemaps Generator

Name of the Vulnerable Software and Affected Versions: WPGrim Dynamic XML Sitemaps Generator for Google plugin versions prior to 1.3.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing...