CVE-2025-12042 Course Booking System <= 6.1.5 - Missing Authorization to Unauthenticated Booking Data Export

The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in the csv-export.php file in all versions up to, and including, 6.1.5. This makes it possible for unauthenticated attackers to directly access the file and obtain an expo...

CVE-2025-12042

The CVE-2025-12042 vulnerability affects the WordPress Course Booking System plugin, specifically due to a missing capability check in csv-export.php. This flaw allows unauthenticated access to export (download) all booking data for all versions up to and including 6.1.5. Public details consisten...

cybersec-ids

cybersec-ids Full-stack AI-driven Web App Intrusion Detection...

CVE-2025-62417

Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character for example =, +, -, or @ is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This...

EUVD-2018-6743

Malware in sbrugna...

EUVD-2020-23850

Malware in sbrugna...

EUVD-2020-7266

Malware in sbrugna...

EUVD-2018-12126

Malware in sbrugna...

EUVD-2014-2412

Malware in sbrugna...

EUVD-2021-2220

Malware in sbrugna...

EUVD-2017-15161

Malware in sbrugna...

EUVD-2015-7906

Malware in sbrugna...

EUVD-2021-13793

Malware in sbrugna...

EUVD-2022-42924

Malicious code in bioql PyPI...

EUVD-2022-28220

Malicious code in bioql PyPI...

EUVD-2025-5507

Malicious code in bioql PyPI...

EUVD-2024-24363

Malicious code in bioql PyPI...

EUVD-2022-27834

Malicious code in bioql PyPI...

EUVD-2021-28271

Malicious code in bioql PyPI...

EUVD-2022-2006

Malicious code in bioql PyPI...