1657 matches found
CVE-2021-25053
The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE...
graphicsmagick:coder_HEIF_fuzzer: Use-of-uninitialized-value in fillIntraPredModeCandidates
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6008683345805312 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
graphicsmagick:coder_HEIF_fuzzer: Use-of-uninitialized-value in heif_encoding_options_copy
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5536276067713024 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
Coder Code-Server security vulnerabilities
Coder Code-Server is a product developed based on Microsoft's open-source Visual Studio Code by Coder, Inc. It is used to build a convenient and unified development environment for developers. A security vulnerability exists in Coder Code-Server versions prior to 4.99.4 that stems from not proper...
bespokelabs-curator (>=0.1.15rc1, <=0.1.15.post1), deepseek-coder (>=0.1.0a0, <=0.1.0) +21 more potentially affected by CVE-2025-29783 +1 more via vllm (>=0.6.6.post1, <=0.7.3)
vllm PYPI version =0.6.6.post1, =0.1.15rc1, =0.1.0a0, =0.0.2, =0.1.1, =0.0.2, =0.2.0, =2.0.0a2, =0.0.15, =0.0.7, =0.1.0, =0.0.7, =0.0.9 - orign 0.1.0 and more Source cves: CVE-2025-29783, CVE-2025-32444 Source advisory: OSV:GHSA-X3M8-F7G5-QHM7...
graphicsmagick:coder_TIFF_any_fuzzer: Crash in LD_UINT16_HI
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6094244645502976 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderTIFFanyfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
CVE-2024-13726
The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
WordPress Themes Coder plugin < 1.4.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Themes Coder versions 1.4.0...
CVE-2024-13726
The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
CVE-2024-13726
The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
CVE-2024-13726 Themes Coder <= 1.3.4 - Unauthenticated SQLi
The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
CVE-2024-13726: Improper Neutralization of Special Elements used in an SQL Command
The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
PT-2025-6603
Name of the Vulnerable Software and Affected Versions Coder WordPress plugin versions 1.3.4 and earlier Description The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users,...
WordPress Plugins, Themes, Coder security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-24699
Cross-Site Request Forgery CSRF vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting XSS.This issue affects WP Coder: from n/a through = 3.6...
CVE-2025-24699
Cross-Site Request Forgery CSRF vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting XSS.This issue affects WP Coder: from n/a through = 3.6...
CVE-2025-24699 WordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting XSS.This issue affects WP Coder: from n/a through = 3.6...
CVE-2025-24699
CVE-2025-24699 : WordPress WP Coder plugin is affected (versions up to 3.6). The issue is a CSRF that enables Cross‑Site Scripting (XSS) via the vulnerable plugin code. Public records identify the nature of the vulnerability as CSRF to XSS in WP Coder <= 3.6. Red Hat/RedHat-related and CVE dat...
CVE-2025-24699 WordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Wow-Company WP Coder allows Cross-Site Scripting XSS. This issue affects WP Coder: from n/a through 3.6...
CVE-2025-24699: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting XSS.This issue affects WP Coder: from n/a through = 3.6...