11 matches found
EUVD-2025-7948
Malicious code in bioql PyPI...
CVE-2025-30592
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30592
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30592 WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30592 WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30592
CVE-2025-30592 is a Missing Authorization vulnerability in the Advanced Dewplayer WordPress plugin (up to version 1.6). The Wordfence/WordPress vulnerability dataset indicates an Unauthorized Access issue with CVSS v3.1 base score 5.3 (Medium) and exploitation status not explicitly documented. Th...
WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability
plugin = 1.6 Broken Access Control Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Advanced Dewplayer versions = 1.6...
WordPress plugin Advanced Dewplayer 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Advanced Dewplayer 'dew_file' Directory Traversal Vulnerability
WordPress Advanced Dewplayer Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Directory traversal
Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...
CVE-2013-7240
The CVE-2013-7240 entry affects the WordPress plugin Advanced Dewplayer (version 1.2). A directory traversal flaw exists in the plugin’s download-file.php that allows an attacker to read arbitrary files by manipulating the dew_file parameter (dot-dot traversal). Exploitation details are consisten...