531 matches found
EUVD-2024-17162
Malicious code in bioql PyPI...
EUVD-2023-45166
Malicious code in bioql PyPI...
EUVD-2023-43683
Malicious code in bioql PyPI...
EUVD-2025-27540
Malicious code in bioql PyPI...
EUVD-2024-30580
Malicious code in bioql PyPI...
EUVD-2022-39068
Malicious code in bioql PyPI...
EUVD-2024-37712
Malicious code in bioql PyPI...
EUVD-2024-31807
Malicious code in bioql PyPI...
EUVD-2024-28434
Malicious code in bioql PyPI...
EUVD-2024-36553
Malicious code in bioql PyPI...
CVE-2025-35431
CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1...
CVE-2025-35431
CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1...
CVE-2025-35431 CISA Thorium LDAP injection
CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1...
WordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin SUMO Memberships for WooCommerce versions 7.8.0...
CVE-2025-9048
The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delimgajaxcall function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
CVE-2025-9048
The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delimgajaxcall function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
CVE-2025-9048 Wptobe-memberships <= 3.4.2 - Authenticated (Subscriber+) Arbitrary File Deletion
The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delimgajaxcall function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
CVE-2025-9048 Wptobe-memberships <= 3.4.2 - Authenticated (Subscriber+) Arbitrary File Deletion
The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delimgajaxcall function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
CVE-2025-9048
CVE-2025-9048 concerns the Wptobe-memberships WordPress plugin. The Wordfence disclosure confirms an authenticated (Subscriber+) path traversal-like flaw in del_img_ajax_call() that permits arbitrary file deletions on affected servers in all versions up to 3.4.2. The description notes that deleti...
WordPress plugin Wptobe-memberships 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...