373 matches found
EUVD-2024-17057
Malicious code in bioql PyPI...
EUVD-2024-32286
Malicious code in bioql PyPI...
EUVD-2024-47378
Malicious code in bioql PyPI...
EUVD-2022-34343
Malicious code in bioql PyPI...
EUVD-2024-27051
Malicious code in bioql PyPI...
EUVD-2024-17054
Malicious code in bioql PyPI...
CVE-2025-58594
Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through = 2.7.12...
CVE-2025-58594
Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through = 2.7.12...
WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Peter Thaleikis in WordPress Plugin Brizy versions = 2.7.12...
CVE-2025-58594 WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability
Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through = 2.7.12...
CVE-2025-58594 WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability
Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through = 2.7.12...
CVE-2025-58594
CVE-2025-58594 : WordPress Brizy Plugin 2.7.12) per Patchstack/PT-Security/CVE references. If upgrading is not possible, apply vendor advisories/remediation as they become available.
WordPress plugin Brizy 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-35729
Name of the Vulnerable Software and Affected Versions: Brizy versions through 2.7.12 Description: Brizy suffers from a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Brizy to a version later than 2.7.12...
CVE-2025-4370
The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on processexternalasseturls function as well as missing path validation in storefile function in all versions up to, and including, 2.6.20. This makes it possible for unauthenticated...
CVE-2025-4370
The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on processexternalasseturls function as well as missing path validation in storefile function in all versions up to, and including, 2.6.20. This makes it possible for unauthenticated...
CVE-2025-4370
The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on processexternalasseturls function as well as missing path validation in storefile function in all versions up to, and including, 2.6.20. This makes it possible for unauthenticated...
CVE-2025-4370 Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload
The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on processexternalasseturls function as well as missing path validation in storefile function in all versions up to, and including, 2.6.20. This makes it possible for unauthenticated...
CVE-2025-4370 Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload
The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on processexternalasseturls function as well as missing path validation in storefile function in all versions up to, and including, 2.6.20. This makes it possible for unauthenticated...
CVE-2025-4370
CVE-2025-4370 reports a vulnerability in Brizy – Page Builder for WordPress (versions up to and including 2.6.20) where unauthenticated attackers can upload limited file types due to missing authorization in process_external_asset_urls and missing path validation in store_file. This leads to unin...