EUVD-2026-37640

Subscriber Broken Authentication in Melhor Envio = 2.16.3 versions...

CVE-2026-54804: Authentication Bypass Using an Alternate Path or Channel

Subscriber Broken Authentication in Melhor Envio = 2.16.3 versions...

PT-2026-50357

Subscriber Broken Authentication in Melhor Envio = 2.16.3 versions...

WordPress Melhor Envio plugin <= 2.16.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by HieuPenguinnn in WordPress Plugin Melhor Envio versions = 2.16.3...

EUVD-2024-54391

Malicious code in bioql PyPI...

CVE-2024-13820

The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.15.11 via the 'run' function, which uses a hardcoded hash. This makes it possible for unauthenticated attackers to extract sensitive data including environment information...

CVE-2024-13820 Melhor Envio <= 2.15.11 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash

The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.15.11 via the 'run' function, which uses a hardcoded hash. This makes it possible for unauthenticated attackers to extract sensitive data including environment information...

CVE-2024-13820 Melhor Envio <= 2.15.9 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash

The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.15.9 via the 'run' function, which uses a hardcoded hash. This makes it possible for unauthenticated attackers to extract sensitive data including environment information,...

CVE-2024-13820

CVE-2024-13820 (Melhor Envio plugin for WordPress): The vulnerability is an unauthenticated sensitive information exposure via a hardcoded hash in the plugin’s run() function, affecting Melhor Envio versions up to 2.15.11 (per Wordfence). Impact per sources includes exposure of environment inform...

PT-2025-15332 · WordPress · Melhor Envio

Name of the Vulnerable Software and Affected Versions: Melhor Envio plugin for WordPress versions up to and including 2.15.9 Description: The issue allows unauthenticated attackers to extract sensitive data, including environment information, plugin tokens, shipping configurations, and limited...

WordPress plugin Melhor Envio 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

CVE-2024-13820: Exposure of Sensitive Information to an Unauthorized Actor

The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.15.11 via the 'run' function, which uses a hardcoded hash. This makes it possible for unauthenticated attackers to extract sensitive data including environment information...