CVE-2026-65525

Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...

CVE-2026-65525

Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...

CVE-2026-65525

CVE-2026-65525 affects the WordPress Civi Framework plugin up to version 2.2.0. The issue is unauthenticated broken access control, enabling access to resources or actions that should be restricted. The available documents identify the affected software and the vulnerability class but do not prov...

CVE-2026-65525 WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...

EUVD-2026-48126

Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...

CVE-2026-65476 WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65476

CVE-2026-65476 affects WordPress Civi theme versions

CVE-2026-65476 WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65476

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Civi Framework versions = 2.2.0...

PT-2026-63936

Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...

CVE-2026-65476: Missing Authorization

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65525: Missing Authorization

Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...

WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Civi versions = 2.2.4...

EUVD-2025-17670

Malicious code in bioql PyPI...

EUVD-2024-54059

Malicious code in bioql PyPI...

EUVD-2024-54060

Malicious code in bioql PyPI...

EUVD-2024-54058

Malicious code in bioql PyPI...

WordPress Civi Framework plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Civi Framework plugin that stems from the WEB application not adequately verifying that a request is from a...

CVE-2025-49511

Cross-Site Request Forgery CSRF vulnerability in uxper Civi Framework civi-framework allows Cross Site Request Forgery.This issue affects Civi Framework: from n/a through = 2.1.6...