262 matches found
CVE-2026-11872
The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...
CVE-2026-11872 Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item
The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...
CVE-2026-11872
CVE-2026-11872 affects the Clever Mega Menu for Visual Composer WordPress plugin (
EUVD-2026-51939
The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...
CVE-2026-11872
The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...
CVE-2019-12920
On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt...
CVE-2019-12919
On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...
CVE-2024-2350
The Clever Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CAFE Icon, CAFE Team Member, and CAFE Slider widgets in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2025-117490
Malicious code in clever-gold-hare npm...
EUVD-2025-100386
Malicious code in clevertermitez3n npm...
EUVD-2025-100390
Malicious code in clevercowz3n npm...
EUVD-2025-100392
Malicious code in clevercentipedez3n npm...
EUVD-2025-106068
Malicious code in cleverdamselflyz3n npm...
MAL-2025-119237 Malicious code in clever_tapir_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d445f8016f119698be95543244d069fe0b29a0b624917c96fd99f5c23f531013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-82489
Malicious code in cleverminnow0xrequest npm...
EUVD-2025-86722
Malicious code in cleverbutterflyz3n npm...
Malicious code in clever-crimson-iguana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742ee34854482456da363c21f5eb1d189966fe0757c64e1bbfd29aa7dd7ec8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55424
Malicious code in clever-orange-chinchilla npm...