14243 matches found
CVE-2025-11166
WP Go Maps (formerly WP Google Maps) for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) across all versions up to 9.0.46. The root cause is an AJAX bridge that exposes state-changing REST actions without proper CSRF token validation and GET-accessible destructive logic lacking a per...
CVE-2025-11171
CVE-2025-11171 affects the Chartify – WordPress Chart Plugin (up to version 3.5.9). A Missing Authentication for a Critical Function vulnerability arises from an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter without nonce or capability checks. Thi...
CVE-2025-61999
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...
PT-2025-41227
Name of the Vulnerable Software and Affected Versions Chartify – WordPress Chart Plugin versions prior to 3.5.9 Description The software contains a missing authentication check for a critical function. An unauthenticated AJAX action is registered, dispatching to admin-class methods based on a...
EUVD-2008-6865
Malware in sbrugna...
EUVD-2015-6224
Malware in sbrugna...
EUVD-2018-0836
Malware in sbrugna...
EUVD-2021-12002
Malware in sbrugna...
EUVD-2015-6627
Malware in sbrugna...
EUVD-2006-5886
Malware in sbrugna...
EUVD-2020-4048
Malware in sbrugna...
EUVD-2007-1385
Malware in sbrugna...
EUVD-2020-25864
Malware in sbrugna...
EUVD-2019-7768
Malware in sbrugna...
EUVD-2019-0831
Malware in sbrugna...
EUVD-2008-0240
Malware in sbrugna...
EUVD-2017-16546
Malware in sbrugna...
EUVD-2021-14527
Malware in sbrugna...