CVE-2025-12953: Missing Authorization

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the "rtclajaxaddlistingtype", "rtclajaxupdatelistingtype", and "rtclajaxdeletelistingtype" function in all...

CVE-2025-58638 WordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Institutions Directory institutions-directory allows Reflected XSS.This issue affects Institutions Directory: from n/a through = 1.3.3...

CVE-2025-64219

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.18...

EUVD-2025-36617

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.18...

CVE-2025-64219: Missing Authorization

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.18...

CVE-2025-10488: Improper Limitation of a Pathname to a Restricted Directory

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validation in the addlistingaction AJAX action in all versions up to, and including, 8.4.8. This makes it possible for...

EUVD-2021-11162

Malware in sbrugna...

EUVD-2021-11165

Malware in sbrugna...

EUVD-2022-5340

Malicious code in bioql PyPI...

EUVD-2023-58086

Malicious code in bioql PyPI...

EUVD-2024-54065

Malicious code in bioql PyPI...

EUVD-2022-5159

Malicious code in bioql PyPI...

EUVD-2024-53986

Malicious code in bioql PyPI...

EUVD-2022-3291

Malicious code in bioql PyPI...

EUVD-2023-57840

Malicious code in bioql PyPI...

EUVD-2025-25997

Malicious code in bioql PyPI...

EUVD-2022-0561

Malicious code in bioql PyPI...

EUVD-2023-56229

Malicious code in bioql PyPI...

EUVD-2023-2055

Malicious code in bioql PyPI...

WordPress CM Business Directory plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin CM Business Directory versions = 1.5.2...