3580 matches found
CVE-2025-11518: Authorization Bypass Through User-Controlled Key
The WPC Smart Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.0.3 via several wishlist AJAX functions due to missing validation on a user controlled key that is exposed when wishlists are shared. This makes it...
PT-2025-41649
Name of the Vulnerable Software and Affected Versions WPC Smart Wishlist for WooCommerce plugin for WordPress versions up to and including 5.0.3 Description The software is susceptible to an Insecure Direct Object Reference issue in several wishlist AJAX functions. This is due to a lack of...
CVE-2025-40676
Insecure Direct Object Reference IDOR in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Research Infrastructure BBMRI-ERIC. This vulnerability allows an attacker to access or modify unauthorised resources by manipulating requests that use the 'userID' parameter in...
EUVD-2020-6331
Malware in sbrugna...
EUVD-2012-1583
Malware in sbrugna...
EUVD-2014-2369
Malware in sbrugna...
EUVD-2018-8413
Malware in sbrugna...
EUVD-2019-4330
Malware in sbrugna...
EUVD-2020-5713
Malware in sbrugna...
EUVD-2021-23003
Malware in sbrugna...
EUVD-2021-23786
Malware in sbrugna...
EUVD-2020-8160
Malware in sbrugna...
EUVD-2021-23482
Malware in sbrugna...
EUVD-2021-24815
Malware in sbrugna...
EUVD-2018-7563
Malware in sbrugna...
EUVD-2021-23789
Malware in sbrugna...
EUVD-2019-8885
Malware in sbrugna...
EUVD-2021-23004
Malware in sbrugna...