EUVD-2025-18322

Malicious code in bioql PyPI...

WordPress plugin XiSearch 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

PT-2025-25480 · WordPress · Isearch

Name of the Vulnerable Software and Affected Versions: XiSearch bar plugin for WordPress versions up to, and including, 2.6 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'xisearch-key-config' page. This allows unauthenticated...