CVEAlertor

CVEAlertor Get an instant Telegram alert the moment a new C...

CVE-2025-4397

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data...

EUVD-2025-209728

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data...

CVE-2025-4397

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data...

CVE-2025-4397

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data...

Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts

Cybersecurity researchers have disclosed a security "blind spot" in Google Cloud's Vertex AI platform that could allow artificial intelligence AI agents to be weaponized by an attacker to gain unauthorized access to sensitive data and compromise an organization's cloud environment. According to...

CVE-2025-12115

CVE-2025-12115 affects the WordPress plugin “WPC Name Your Price for WooCommerce” (versions up to and including 2.1.9). The root cause is that the plugin does not disable the ability to enter a custom price for a product when it has been disabled, allowing unauthenticated actors to purchase at lo...

EUVD-2025-9261

Malicious code in bioql PyPI...

EUVD-2024-29778

Malicious code in bioql PyPI...

EUVD-2023-56212

Malicious code in bioql PyPI...

CVE-2023-51499

Missing Authorization vulnerability in WooCommerce WooCommerce Shipping Per Product.This issue affects WooCommerce Shipping Per Product: from n/a through 2.5.4...

CVE-2025-31773

Missing Authorization vulnerability in cedcommerce Ship Per Product ship-per-product allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ship Per Product: from n/a through = 2.1.0...

CVE-2025-31773

Missing Authorization vulnerability in cedcommerce Ship Per Product ship-per-product allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ship Per Product: from n/a through = 2.1.0...

CVE-2025-31773

CVE-2025-31773 concerns the Ship Per Product plugin for WordPress by CedCommerce. The description in the initial document identifies a Missing Authorization vulnerability where functionality is not properly constrained by ACLs, enabling access to restricted features. Affected product/version: Shi...

CVE-2025-31773 WordPress Ship Per Product plugin <= 2.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in cedcommerce Ship Per Product allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Ship Per Product: from n/a through 2.1.0...

CVE-2025-31773 WordPress Ship Per Product plugin <= 2.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in cedcommerce Ship Per Product ship-per-product allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ship Per Product: from n/a through = 2.1.0...

WordPress plugin Ship Per Product 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2025-14159 · Cedcommerce · Cedcommerce Ship Per Product

Name of the Vulnerable Software and Affected Versions: cedcommerce Ship Per Product versions 2.1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.1.0 and...

CVE-2025-30866

Missing Authorization vulnerability in Giannis Kipouros Terms & Conditions Per Product terms-and-conditions-per-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Terms & Conditions Per Product: from n/a through = 1.2.15...

WordPress Terms & Conditions Per Product plugin <= 1.2.15 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Terms & Conditions Per Product versions = 1.2.15...