105 matches found
CVE-2024-10571
CVE-2024-10571 Chartify – WordPress Chart Plugin = 2.9.5 - Unauthenticated Local File Inclusion via source Description The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This make...
CVE-2025-11171
CVE-2025-11171: Missing Authentication in Chartify WordPress Plugin Keywords: CVE-2025-11171, Chartify WordPress vulnerability, missing authentication, WordPress security, unauthenticated AJAX exploit, WordPress plugin vulnerability, CWE-306, WordPress chart plugin security, authentication bypass...
Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion
The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...
Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion Detection
The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...
banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-54058 via pillow (4.3.0)
pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...
banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-59205 via pillow (4.3.0)
pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...
banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-59197 via pillow (4.3.0)
pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...
banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-54059 via pillow (4.3.0)
pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...
banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-59197 via pillow (4.3.0)
pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...
cami-amber (>=2.0.0, <=2.0.3), cami-opal (1.0.11) +5 more potentially affected by CVE-2026-21883 via bokeh (0.13.0)
bokeh PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - cami-amber =2.0.0, =2.2.0, =0.2.1, =1.3.0, =2.0.7 - spade-bokeh 0.1.2 - wizardhat 0.2.0 Source cves: CVE-2026-21883 Source advisory: OSV:PYSEC-2026-1...
chartify (>=3.0.4, <=3.1.0), choochoo (>=0.37.0, <=0.38.1) +18 more potentially affected by CVE-2026-21883 via bokeh (2.2.3)
bokeh PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - chartify =3.0.4, =0.37.0, =1.0.1a1, =0.1.11, =1.0.0, =0.0.1, =4.3.1, =0.16.0, =0.0.2, =0.0.8, =1.5.1, =0.17.3rc6, =2.0.1, =2.7.7 and more Source cves:...
banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-55798 via pillow (4.3.0)
pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...
banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-54059 via pillow (4.3.0)
pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...
banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2026-42308 via pillow (4.3.0)
pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...
backtrader-plotting (1.0.0), biocrnpyler (0.2.1) +31 more potentially affected by CVE-2026-21883 via bokeh (1.4.0)
bokeh PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - backtrader-plotting 1.0.0 - biocrnpyler 0.2.1 - chartify =2.3.4, =0.2.78, =0.10.0, =0.8.0, =0.4.0, =0.1.0, =0.2.76, =0.1.0a1, =0.10.1.post1, =0.7.4,...
chartify (>=3.0.4, <=3.1.0), choochoo (>=0.37.0, <=0.38.1) +18 more potentially affected by CVE-2026-21883 via bokeh (2.2.3)
bokeh PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - chartify =3.0.4, =0.37.0, =1.0.1a1, =0.1.11, =1.0.0, =0.0.1, =4.3.1, =0.16.0, =0.0.2, =0.0.8, =1.5.1, =0.17.3rc6, =2.0.1, =2.7.7 and more Source cves:...
cami-amber (>=2.0.0, <=2.0.3), cami-opal (1.0.11) +5 more potentially affected by CVE-2026-21883 via bokeh (0.13.0)
bokeh PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - cami-amber =2.0.0, =2.2.0, =0.2.1, =1.3.0, =2.0.7 - spade-bokeh 0.1.2 - wizardhat 0.2.0 Source cves: CVE-2026-21883 Source advisory:...
WordPress Chartify plugin cross-site request forgery vulnerability
The WordPress Chartify plugin is a tool for quickly building charts and graphs in your WordPress site, designed to simplify the process of data visualization. WordPress Chartify plugin suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately...
