WordPress WPtouch 3.x - Open Redirect Detection

WordPress WPtouch plugin 3.x contains an open redirect vulnerability. The plugin fails to properly sanitize user-supplied input. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python...

WordPress WPtouch 3.7.5 - Open Redirect Detection

WordPress WPtouch 3.7.5 is affected by an Open Redirect issue. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WPtouch 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress WPtouch 3.7.5 - Ope...

EUVD-2010-4744

Malware in sbrugna...

EUVD-2011-4721

Malware in sbrugna...

EUVD-2022-42794

Malicious code in bioql PyPI...

EUVD-2025-17252

Malicious code in bioql PyPI...

CVE-2025-49318

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPtouch WPtouch wptouch allows Stored XSS.This issue affects WPtouch: from n/a through = 4.3.60...

CVE-2025-49318

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPtouch WPtouch wptouch allows Stored XSS.This issue affects WPtouch: from n/a through = 4.3.60...

CVE-2025-49318 WordPress WPtouch plugin <= 4.3.60 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPtouch WPtouch wptouch allows Stored XSS.This issue affects WPtouch: from n/a through = 4.3.60...

CVE-2025-49318 WordPress WPtouch plugin <= 4.3.60 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPtouch WPtouch wptouch allows Stored XSS.This issue affects WPtouch: from n/a through = 4.3.60...

CVE-2025-49318

CVE-2025-49318: Stored XSS in WPtouch due to improper neutralization during web page generation. Affected WPtouch versions: up to 4.3.60. Connected Red Hat entry repeats description; no public details on exploit methods or patches are provided in the supplied documents.

PT-2025-24244 · Wptouch · Wptouch

Name of the Vulnerable Software and Affected Versions: WPtouch versions 4.3.60 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For WPtouch version...

CVE-2025-49318: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPtouch WPtouch wptouch allows Stored XSS.This issue affects WPtouch: from n/a through = 4.3.60...

WordPress plugin WPtouch has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress WPtouch plugin <= 4.3.60 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin WPtouch versions = 4.3.60...

CVE-2022-3416

The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...

CVE-2022-3417

The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user import intentionally or not a malicious settings file and a suitable gadget chain is present on the blog...

CVE-2011-4803

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4779

Cross-site scripting XSS vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wptouchsettings parameter to include/adsense-new.php. NOTE: some of these details are obtained from...

WordPress WPtouch Pro 4 Backup Disclosure

==================================================================================================================================== | Title : WordPress - WPtouch Pro 4 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...