WordPress Constructor plugin <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean vulnerability

Missing Authorization to Authenticated Subscriber+ Theme Clean vulnerability discovered by Sulabh Jain pentestmonkey11 in WordPress Theme Constructor versions = 1.6.5...

EUVD-2022-5735

Malicious code in bioql PyPI...

EUVD-2022-1752

Malicious code in bioql PyPI...

EUVD-2023-36294

Malicious code in bioql PyPI...

EUVD-2022-3963

Malicious code in bioql PyPI...

EUVD-2022-44468

Malicious code in bioql PyPI...

EUVD-2025-26409

Malicious code in bioql PyPI...

EUVD-2022-1956

Malicious code in bioql PyPI...

EUVD-2022-2227

Malicious code in bioql PyPI...

EUVD-2025-26411

Malicious code in bioql PyPI...

EUVD-2023-2356

Malicious code in bioql PyPI...

EUVD-2024-3277

Malicious code in bioql PyPI...

EUVD-2023-2165

Malicious code in bioql PyPI...

EUVD-2022-0813

Malicious code in bioql PyPI...

EUVD-2022-4100

Malicious code in bioql PyPI...

EUVD-2023-36475

Malicious code in bioql PyPI...

CVE-2025-9194

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

EUVD-2025-32249

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...