1606 matches found
MAL-2025-6975 Malicious code in 007007-simple-calculator (npm)
The package 007007-simple-calculator was found to contain malicious code...
CVE-2025-52775
Missing Authorization vulnerability in Ronik@UnlimitedWP Project Cost Calculator project-cost-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Project Cost Calculator: from n/a through = 1.0.0...
CVE-2025-52775 WordPress Project Cost Calculator Plugin <= 1.0.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Ronik@UnlimitedWP Project Cost Calculator project-cost-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Project Cost Calculator: from n/a through = 1.0.0...
CVE-2025-52775
CVE-2025-52775 concerns the WordPress plugin Project Cost Calculator (versions ≤ 1.0.0). The issue is a missing/ broken authorization flaw caused by incorrectly configured access control security levels, enabling unauthorized access to cost calculator data. CVSS v3.1 metrics: AV:N, AC:L, PR:L, UI...
CVE-2025-52775 WordPress Project Cost Calculator Plugin <= 1.0.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Ronik@UnlimitedWP Project Cost Calculator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Project Cost Calculator: from n/a through 1.0.0...
PT-2025-33213 · WordPress · Project Cost Calculator
Name of the Vulnerable Software and Affected Versions: Ronik@UnlimitedWP Project Cost Calculator versions through 1.0.0 Description: A missing authorization flaw exists in Ronik@UnlimitedWP Project Cost Calculator due to incorrectly configured access control security levels. Recommendations: At t...
WordPress plugin Project Cost Calculator 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Project Cost Calculator Plugin <= 1.0.0 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by theviper17 in WordPress Plugin Project Cost Calculator versions = 1.0.0...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Spring Cloud Gateway Vulnerability Demonstratio...
WordPress Cost Calculator Plugin <= 7.4 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Cost Calculator versions = 7.4...
Malicious code in node-calculator-yqhi (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6741 Malicious code in node-calculator-yqhi (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6739 Malicious code in node-calculator-fahw (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in node-calculator-fahw (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in node-calculator-splo (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6740 Malicious code in node-calculator-splo (npm)
The package communicates with a domain associated with malicious activity...
WordPress Clearblue® Ovulation Calculator plugin <= 1.2.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Clearblue® Ovulation Calculator versions = 1.2.4...
CVE-2025-5753
CVE-2025-5753 : The WordPress plug‑in “Valuation Calculator” (Commercial Real Estate Valuation Calculator) is vulnerable to Stored Cross‑Site Scripting via the “link” parameter in all versions up to and including 1.3.2. An authenticated attacker with Contributor‑level access can inject scripts th...
CVE-2025-5753 Valuation Calculator <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via link Parameter
The Valuation Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2025-5753 Valuation Calculator <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via link Parameter
The Valuation Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...