1326 matches found
CVE-2025-60208: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Tusko Trush Advanced Custom Fields : CPT Options Pages acf-cpt-options-pages allows Object Injection.This issue affects Advanced Custom Fields : CPT Options Pages: from n/a through = 2.0.9...
WordPress ACF to REST API plugin <= 3.3.4 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Mohamad Fattyr in WordPress Plugin ACF to REST API versions = 3.3.4...
EUVD-2025-34973
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image cropper functionality in all versions up to, and including, 33.0.15. This makes it possible for unauthenticated attackers to uplo...
CVE-2025-11691 PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL Injection
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the PPOMMeta::getfieldsbyid function in all versions up to, and including, 33.0.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...
CVE-2025-11691
The CVE-2025-11691 entry concerns the PPOM – Product Addons & Custom Fields for WooCommerce WordPress plugin. A SQL Injection exists in PPOM_Meta::get_fields_by_id() for all versions up to 33.0.15 due to insufficient escaping of user input and inadequate query preparation. The vulnerability is ex...
PT-2025-42700
Name of the Vulnerable Software and Affected Versions PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress versions prior to 33.0.16 Description The software contains a SQL Injection flaw in the PPOM Meta::get fields by id function. Insufficient escaping of user-supplied...
CVE-2025-11691: Improper Neutralization of Special Elements used in an SQL Command
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the PPOMMeta::getfieldsbyid function in all versions up to, and including, 33.0.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...
CVE-2025-11391: Unrestricted Upload of File with Dangerous Type
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image cropper functionality in all versions up to, and including, 33.0.15. This makes it possible for unauthenticated attackers to uplo...
The vulnerability of the /custom-fields/ajax module of the Custom Fields component in the FreeScout support service management system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the /custom-fields/ajax module of the Custom Fields component in the FreeScout support service management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...
WordPress Featured Image from URL plugin cross-site scripting vulnerability
WordPress Featured Image from URL plugin is a plugin for solving WordPress website featured image FeaturedImage related problems. The WordPress Featured Image from URL plugin suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of custom...
EUVD-2009-0673
Malware in sbrugna...
EUVD-2020-7304
Malware in sbrugna...
EUVD-2021-11155
Malware in sbrugna...
EUVD-2018-13522
Malware in sbrugna...
EUVD-2019-7250
Malware in sbrugna...
EUVD-2021-11783
Malware in sbrugna...
EUVD-2021-11300
Malware in sbrugna...
EUVD-2020-23750
Malware in sbrugna...