BerqWP <= 1.7.6 - Arbitrary File Upload

The BerqWP Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /api/storewebp.php file in all versions up to, and including, 1.7.6...

CVE-2024-43160

Wordpress BerqWP = 1.7.6 - Неаутентифицированная произвольная загрузка файлов CVE-2024-43160 Плагин BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript для WordPress уязвим к произвольной загрузке файлов из-за отсутствия проверк...

CVE-2026-78528

Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...

EUVD-2026-81520

Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...

CVE-2026-78528 WordPress BerqWP plugin <= 4.1.15 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...

CVE-2026-78528 WordPress BerqWP plugin <= 4.1.15 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...

CVE-2026-78528

CVE-2026-78528 affects the WordPress plugin BerqWP in versions 4.1.15 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, discovered by z3r0s , meaning any remote user can exploit it without prior authentication. The CVSS 3.1 score is 5.3 (MEDIUM) , with a vector of ...

CVE-2026-78528: Missing Authorization

Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...

WordPress BerqWP plugin <= 4.1.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by z3r0s in WordPress Plugin BerqWP versions = 4.1.15...

The vulnerability of the api/store_javascript_cache.php file of the BerqWP plugin allows a hacker to execute arbitrary code.

The vulnerability of the api/storejavascriptcache.php file of the BerqWP plugin is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

VulnCheck KEV: CVE-2025-7443

The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the storejavascriptcache.php file in all versions up to, and including, 2.2.4...

EUVD-2024-49870

Malicious code in bioql PyPI...

EUVD-2025-27393

Malicious code in bioql PyPI...

EUVD-2024-36899

Malicious code in bioql PyPI...

CVE-2025-58979

Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through = 2.2.53...

CVE-2025-58979

Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through = 2.2.53...

WordPress BerqWP Plugin <= 2.2.53 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bao - BlueRock in WordPress Plugin BerqWP versions = 2.2.53...

CVE-2025-58979

CVE-2025-58979 (BerqWP

CVE-2025-58979 WordPress BerqWP Plugin <= 2.2.53 - Broken Access Control Vulnerability

Missing Authorization vulnerability in BerqWP BerqWP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BerqWP: from n/a through 2.2.53...

CVE-2025-58979 WordPress BerqWP Plugin <= 2.2.53 - Broken Access Control Vulnerability

Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through = 2.2.53...