CVE-2025-9266

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

CVE-2025-9266

CVE-2025-9266 affects the WordPress Accelerate theme up to version 1.5.3. The root cause is a missing capability check in enqueue_scripts(), enabling authenticated users with Subscriber-level access and above to install and activate the ThemeGrill Demo Importer plugin. The impact is unauthorized ...

CVE-2025-9266 Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

CVE-2025-9266 Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

EUVD-2025-210641

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

CVE-2025-9266: Missing Authorization

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

Malicious code in boxy-demo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fef0cd8b9f91923e6bf6bf357c229e57bb3b108b48ddc3bc9f0faa8f16b8db On require, index.js loads bridge.js which fetches a platform-specific executable from Cloudflare Workers subdomains whose hostnames are reassembled...

MAL-2026-13037 Malicious code in boxy-demo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fef0cd8b9f91923e6bf6bf357c229e57bb3b108b48ddc3bc9f0faa8f16b8db On require, index.js loads bridge.js which fetches a platform-specific executable from Cloudflare Workers subdomains whose hostnames are reassembled...

MAL-2026-12675 Malicious code in ded-pwa-bnpl-forms-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3094b607c6a3b342b1e8a4d7a3acde686d9fba41a68d430e08cda12dd9b0bca On require of the package, index.js loads support.js which executes at import time: it selects a platform-specific output path, downloads a binary...

PT-2026-68467

Name of the Vulnerable Software and Affected Versions Accelerate versions prior to 1.5.4 Description The Accelerate theme for WordPress allows unauthorized modification of data because the enqueue scripts function lacks a proper capability check. This flaw enables authenticated users with...

readme2demo v0.7.5

readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...

Paged Out! Magazine Issue 4

Paged Out! magazine issue 4 includes sections related to art, artificial intelligence, assembly, cryptography, demo scene, file formats, hardware, history, programming, retro stuff, reverse engineering, and security / hacking...

Paged Out! Magazine Issue 6

Paged Out! magazine issue 6 includes sections related to art, artificial intelligence, assembly, cryptography, demo scene, file formats, food for thought, game development, hardware, networks, OS internals, programming, retro stuff, reverse engineering, and security / hacking...

Paged Out! Magazine Issue 7

Paged Out! magazine issue 7 includes sections related to art, artificial intelligence, cryptography, demo scene, file formats, hardware, history, networks, OS internals, programming, retro stuff, reverse engineering, security / hacking, and system administration...

Exploit for CVE-2026-13157

CVE-2026-13157 Theme Demo Import...

CVE-2026-13157

The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload executable...

CVE-2026-13158

The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload...

CVE-2026-13157

The Theme Demo Import WordPress plugin (versions false override in $upload_overrides. This allows high-privilege users, such as default site administrators or non-super-admin site administrators in a Multisite architecture, to bypass restrictions and upload executable PHP scripts (e.g., .php, .p...

CVE-2026-13157

The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload executable...

EUVD-2026-51713

The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload executable...