166 matches found
EUVD-2025-21581
Malicious code in bioql PyPI...
EUVD-2023-56203
Malicious code in bioql PyPI...
EUVD-2025-21858
Malicious code in bioql PyPI...
EUVD-2024-38119
Malicious code in bioql PyPI...
EUVD-2023-56849
Malicious code in bioql PyPI...
EUVD-2024-23204
Malicious code in bioql PyPI...
CVE-2025-3701
Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner wp-malware-removal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Malcure Malware Scanner: from n/a through = 16.8...
CVE-2025-3701 WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner wp-malware-removal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Malcure Malware Scanner: from n/a through = 16.8...
CVE-2025-3701
CVE-2025-3701 affects the WordPress plugin “Malcure Malware Scanner” (versions up to 16.8). The issue is a Missing Authorization vulnerability caused by incorrectly configured access control, enabling unauthorized access or actions. CVSSv3 base score is 4.3 (Medium). Public sources indicate the v...
CVE-2025-3701 WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Malcure Malware Scanner: from n/a through 16.8...
WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by domiee13 Patchstack Alliance in WordPress Plugin Malcure Malware Scanner versions = 16.8...
WordPress plugin Malcure Malware Scanner has security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
CVE-2025-3701: Missing Authorization
Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner wp-malware-removal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Malcure Malware Scanner: from n/a through = 16.8...
PT-2025-35717
Name of the Vulnerable Software and Affected Versions: Malcure Malware Scanner versions n/a through 16.8 Description: A missing authorization flaw exists in Malcure Malware Scanner, allowing exploitation due to incorrectly configured access control security levels. Recommendations: At the moment,...
WordPress plugin Quttera Web Malware Scanner: Code-related vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2025-33447 · WordPress · Quttera Web Malware Scanner
Name of the Vulnerable Software and Affected Versions: Quttera Web Malware Scanner for WordPress versions up to and including 3.5.1.41 Description: The Quttera Web Malware Scanner plugin for WordPress is susceptible to Server-Side Request Forgery via the RunExternalScan function. Authenticated...
CVE-2025-8013: Server-Side Request Forgery (SSRF)
The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests ...
CVE-2025-7772
The Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 16.8 via the wpmrinspectfile function due to a missing capability check. This makes it possible for authenticated attackers, with...
WordPress Malcure Malware Scanner plugin <= 16.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary File Read vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Malcure Malware Scanner versions = 16.8...
CVE-2025-7772
The Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 16.8 via the wpmrinspectfile function due to a missing capability check. This makes it possible for authenticated attackers, with...