88 matches found
CVE-2026-73997
Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP = 2.3.3 versions...
CVE-2026-73997
The WordPress plugin Starter Templates by Kadence WP (versions ≤ 2.3.3) contains an unauthenticated denial-of-service vulnerability rated CVSS 7.5 (HIGH), allowing remote attackers to disrupt site availability with no authentication or user interaction required. No root-cause mechanism, affected ...
CVE-2026-73997: Allocation of Resources Without Limits or Throttling
Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP = 2.3.3 versions...
PT-2026-77125
Name of the Vulnerable Software and Affected Versions Starter Templates by Kadence WP versions prior to 2.3.4 Description An unauthenticated Denial of Service DoS issue exists, allowing a remote attacker to cause the application to become unavailable without requiring authentication...
WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerability
Denial of Service Attack vulnerability discovered by Asim Alshaya in WordPress Plugin Starter Templates by Kadence WP versions = 2.3.3...
CVE-2026-15286 Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.5.32 - Incorrect Authorization to Authenticated (Contributor+) Post Publication
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'getitemspermissioncheck' function permission callback of the...
CVE-2026-15286: Incorrect Authorization
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'getitemspermissioncheck' function permission callback of the...
CVE-2026-2633: Missing Authorization
The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.6.1. This is due to a missing capability check in the processimagedataajaxcallback function which handles the kadenceimportprocessimagedata AJAX action. T...
CVE-2026-1857: Server-Side Request Forgery (SSRF)
The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.6.1. This is due to insufficient validation of the endpoint parameter in the getitems function of the GetResponse REST API handler. The endpoint's...
EUVD-2024-50757
Malicious code in bioql PyPI...
EUVD-2025-5895
Malicious code in bioql PyPI...
EUVD-2024-20995
Malicious code in bioql PyPI...
EUVD-2024-50076
Malicious code in bioql PyPI...
EUVD-2024-22251
Malicious code in bioql PyPI...
EUVD-2024-46967
Malicious code in bioql PyPI...
EUVD-2025-3940
Malicious code in bioql PyPI...
EUVD-2024-46525
Malicious code in bioql PyPI...
EUVD-2022-43038
Malicious code in bioql PyPI...