CVE-2025-66507 1Panel – CAPTCHA Bypass via Client-Controlled Flag

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.13 and below allow an unauthenticated attacker to disable CAPTCHA verification by abusing a client-controlled parameter. Because the server previously trusted this value without proper validation, CAPTCHA...

WordPress Advanced Ads plugin <= 2.0.12 - Unauthenticated Limited Code Execution vulnerability

Unauthenticated Limited Code Execution vulnerability discovered by mikemyers in WordPress Plugin Advanced Ads versions = 2.0.12...

EUVD-2016-9452

Malware in sbrugna...

EUVD-2021-0829

Malware in sbrugna...

EUVD-2017-3035

Malware in sbrugna...

EUVD-2017-5739

Malware in sbrugna...

EUVD-2024-46130

Malicious code in bioql PyPI...

EUVD-2025-27444

Malicious code in bioql PyPI...

CVE-2025-39541

Missing Authorization vulnerability in Roland Murg WP Simple Booking Calendar wp-simple-booking-calendar.This issue affects WP Simple Booking Calendar: from n/a through = 2.0.13...

CVE-2025-39541

Missing Authorization vulnerability in Roland Murg WP Simple Booking Calendar wp-simple-booking-calendar.This issue affects WP Simple Booking Calendar: from n/a through = 2.0.13...

CVE-2025-39541 WordPress WP Simple Booking Calendar plugin <= 2.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in Roland Murg WP Simple Booking Calendar wp-simple-booking-calendar.This issue affects WP Simple Booking Calendar: from n/a through = 2.0.13...

CVE-2025-39541

CVE-2025-39541: Missing Authorization in WordPress WP Simple Booking Calendar (WP Simple Booking Calendar) affects versions up to 2.0.13. Root cause described as broken access control; CVSSv3.1 base score 6.5 (Network/Low exploitability: high confidentiality impact). Remediation: upgrade WP Simpl...

WordPress WP Table Builder Plugin <= 2.0.12 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin WP Table Builder versions = 2.0.12...

CVE-2023-1307

Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...

CVE-2023-30531

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it...

CVE-2025-30889

Deserialization of Untrusted Data vulnerability in PickPlugins Testimonial Slider testimonial allows Object Injection.This issue affects Testimonial Slider: from n/a through = 2.0.13...

PT-2025-14707 · Pickplugins · Pickplugins Testimonial Slider

Name of the Vulnerable Software and Affected Versions: PickPlugins Testimonial Slider versions 2.0.13 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in PickPlugins Testimonial Slider. Recommendations: For PickPlugins Testimonial...

WordPress plugin PickPlugins Testimonial Slider 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

CVE-2024-54305

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtexpress J Express Malaysia jt-express allows Reflected XSS.This issue affects J Express Malaysia: from n/a through = 2.0.13...

CVE-2024-56027 WordPress Leads CRM plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bizswoop Leads CRM leads-crm allows Reflected XSS.This issue affects Leads CRM: from n/a through = 2.0.13...