Researchers
Back
Kévin Mosbahi (Mika)
#6
of 59,355
4930.8
Total CVSS
Vulnerabilities
·
714
Low
3
Medium
356
High
298
Critical
57
PT-2025-52610
2025-09-27
6.5
CVE-2025-62901
WordPress
Tormorten Wp Microdata
The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored XSS attacks.
PT-2025-38918
2025-09-22
9.6
CVE-2025-58255
WordPress
Yonisink Custom Post Type Images
A Cross-Site Request Forgery (CSRF) issue exists in yonisink Custom Post Type Images that can lead to Code Injection. The issue allows for potential code execution through crafted requests.
PT-2025-36177
2025-09-05
6.5
CVE-2025-58838
Unknown
Zakir Smooth Accordion
The software contains a cross-site scripting (XSS) issue that allows for stored XSS attacks due to improper neutralization of input during web page generation.
PT-2025-36190
2025-09-05
6.5
CVE-2025-58851
Unknown
Digitalcourt Boxed Content
The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS).
PT-2025-36214
2025-09-05
6.5
CVE-2025-58875
WordPress
Sudar Muthu Wp Github Gist
The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS).
PT-2025-36215
2025-09-05
6.5
CVE-2025-58876
Ali Aghdam
Aparat Video Shortcode
The Ali Aghdam Aparat Video Shortcode software contains a Stored Cross-site Scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into web pages.
PT-2025-36203
2025-09-05
6.5
CVE-2025-58864
Unknown
Iamroody 金数据
The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS).
PT-2025-36216
2025-09-05
6.5
CVE-2025-58878
Woocommerce
Woocommerce Gifts
The software contains a Cross-Site Request Forgery (CSRF) flaw. This allows attackers to perform actions on behalf of authenticated users without their knowledge.
PT-2025-36175
2025-09-05
6.5
CVE-2025-58836
Unknown
Tikolan Fw Anker
The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS).
PT-2025-36208
2025-09-05
6.5
CVE-2025-58869
Simasicher
Simacookie
A Cross-Site Request Forgery (CSRF) vulnerability exists in Simasicher SimaCookie, which also allows Stored Cross-Site Scripting (XSS).
PT-2025-36207
2025-09-05
6.5
CVE-2025-58868
Simasicher
Simacookie
The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting (XSS).
PT-2025-36197
2025-09-05
6.5
CVE-2025-58858
WordPress
Wpbean Wpb Image Widget
The WPBean WPB Image Widget software contains a flaw due to improper neutralization of input during web page generation, which results in a Stored Cross-site Scripting (XSS) issue.
PT-2025-36206
2025-09-05
6.5
CVE-2025-58867
Unknown
Easy Download Media Counter
The software contains a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks.
PT-2025-36211
2025-09-05
6.5
CVE-2025-58872
Premiumbizthemes
Simple Price Calculator
A flaw exists in premiumbizthemes Simple Price Calculator that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data.
PT-2025-36170
2025-09-05
4.3
CVE-2025-58831
Enllax.Js
Enllax.Js
A Cross-Site Request Forgery (CSRF) issue exists in Parallax Scrolling Enllax.js, potentially allowing attackers to perform actions on behalf of authenticated users.
PT-2025-36169
2025-09-05
6.5
CVE-2025-58830
Enllax.Js
Enllax.Js
The software contains a cross-site scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks.
PT-2025-36176
2025-09-05
6.5
CVE-2025-58837
Unknown
Shiful H Ss Font Awesome Icon
The software contains a cross-site scripting (XSS) issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation.
PT-2025-36210
2025-09-05
6.5
CVE-2025-58871
Unknown
Luis Rock Master Paper
The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS).
PT-2025-36201
2025-09-05
6.5
CVE-2025-58862
WordPress
George Sexton Wordpress Events Calendar Plugin – Connectdaily
The WordPress Events Calendar Plugin – connectDaily contains a cross-site scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks.
PT-2025-36219
2025-09-05
6.5
CVE-2025-58882
Unknown
W1Zzard Simple Text Slider
The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS).