EUVD-2025-15336

Malicious code in bioql PyPI...

CVE-2024-10677

The BTEV WordPress plugin through 2.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-10677

The BTEV WordPress plugin (versions 2.0.2 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when updating plugin settings. This flaw could allow an attacker to trick a logged-in administrator into making unauthorized changes to the plugin's con...

PT-2025-21409 · WordPress · Btev Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: BTEV WordPress plugin versions 2.0.2 and earlier Description: The issue concerns the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This could potentially enab...

CVE-2024-10677: Cross-Site Request Forgery (CSRF)

The BTEV WordPress plugin through 2.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...