223 matches found
CVE-2025-11564
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check while verifying webhook signatures on the "verifyAndCreateOrderData" function in all versions up to, and including, 3.8.3. This makes it...
CVE-2025-6639
CVE-2025-6639 affects Tutor LMS Pro (WordPress) up to version 3.8.3. The issue is an Insecure Direct Object Reference caused by missing validation of a user-controlled key when viewing/editing assignments via tutor_assignment_submit(), enabling authenticated users with Subscriber+ to view or edit...
CVE-2025-11564
CVE-2025-11564 affects Tutor LMS – eLearning and online course solution for WordPress (versions up to and including 3.8.3). The root cause is a missing capability check when verifying webhook signatures in the verifyAndCreateOrderData function, enabling unauthenticated attackers to bypass payment...
WordPress Tutor LMS plugin <= 3.8.3 - Missing Authorization to Sensitive Information Exposure vulnerability
Missing Authorization to Sensitive Information Exposure vulnerability discovered by sergioframi in WordPress Plugin Tutor LMS versions = 3.8.3...
Cargo Mediawiki Extension vulnerable to Cross-site Scripting
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension befor 3.8.3...
GHSA-GR6V-3PMP-996P Cargo Mediawiki Extension vulnerable to Cross-site Scripting
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension befor 3.8.3...
EUVD-2018-0436
Malware in sbrugna...
EUVD-2017-9491
Malware in sbrugna...
EUVD-2015-8562
Malware in sbrugna...
EUVD-2023-56096
Malicious code in bioql PyPI...
EUVD-2022-39811
Malicious code in bioql PyPI...
EUVD-2024-2990
Malicious code in bioql PyPI...
EUVD-2024-3105
Malicious code in bioql PyPI...
EUVD-2024-3067
Malicious code in bioql PyPI...
EUVD-2024-35225
Malicious code in bioql PyPI...
EUVD-2025-27594
Malicious code in bioql PyPI...
EUVD-2024-3113
Malicious code in bioql PyPI...
EUVD-2024-2977
Malicious code in bioql PyPI...
Decap CMS Cross Site Scripting (XSS) vulnerability
Decap CMS through 3.8.3 is vulnerable to stored Cross-Site Scripting XSS in the admin preview pane. User-controlled fields e.g., title, description, tags, and body are rendered in the preview without sufficient sanitization/escaping. An attacker with low-privilege author/contributor access can...
CVE-2025-57520
A Cross Site Scripting XSS vulnerability exists in Decap CMS thru 3.8.3. Input fields such as body, tags, title, and description are not properly sanitized before being rendered in the content preview pane. This enables an attacker to inject arbitrary JavaScript which executes whenever a user vie...