334 matches found
CVE-2025-8446
CVE-2025-8446 concerns the Blaze Demo Importer plugin for WordPress (versions 1.0.12 or apply the vendor-provided fix, and validate that unauthorized plugin installations are disallowed.
CVE-2025-8446 Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...
WordPress plugin Blaze Demo Importer 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-37921
Name of the Vulnerable Software and Affected Versions: Blaze Demo Importer plugin for WordPress versions through 1.0.12 Description: The Blaze Demo Importer plugin for WordPress is susceptible to unauthorized limited plugin installation due to a missing capability check within the blaze demo...
Malicious code in cybernetics-paleobotany-xanadu-blaze (npm)
The package cybernetics-paleobotany-xanadu-blaze was found to contain malicious code...
Malicious code in webpack-command-blaze-ariel (npm)
The package webpack-command-blaze-ariel was found to contain malicious code...
Malicious code in miranda-spica-regulus-blaze (npm)
The package miranda-spica-regulus-blaze was found to contain malicious code...
Malicious code in quark-mdx-blaze-foundation (npm)
The package quark-mdx-blaze-foundation was found to contain malicious code...
Malicious code in altair-blaze-html-webpack-plugin-ora (npm)
The package altair-blaze-html-webpack-plugin-ora was found to contain malicious code...
MAL-2025-43440 Malicious code in altair-blaze-html-webpack-plugin-ora (npm)
The package altair-blaze-html-webpack-plugin-ora was found to contain malicious code...
MAL-2025-45721 Malicious code in quark-mdx-blaze-foundation (npm)
The package quark-mdx-blaze-foundation was found to contain malicious code...
MAL-2025-44766 Malicious code in javascript-auth0-selenology-blaze (npm)
The package javascript-auth0-selenology-blaze was found to contain malicious code...
MAL-2025-43920 Malicious code in cybernetics-paleobotany-xanadu-blaze (npm)
The package cybernetics-paleobotany-xanadu-blaze was found to contain malicious code...
MAL-2025-46601 Malicious code in webpack-command-blaze-ariel (npm)
The package webpack-command-blaze-ariel was found to contain malicious code...
MAL-2025-45204 Malicious code in miranda-spica-regulus-blaze (npm)
The package miranda-spica-regulus-blaze was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2018-14719
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and...
Malicious code in xml-juno-leda-blaze (npm)
The package xml-juno-leda-blaze was found to contain malicious code...
Malicious code in astrochemistry-element-ui-darkenergy-blaze (npm)
The package astrochemistry-element-ui-darkenergy-blaze was found to contain malicious code...