124 matches found
CVE-2026-1277
The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirectto' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentiall...
WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Promo versions = 1.3.0...
EUVD-2025-27936
Malicious code in bioql PyPI...
EUVD-2024-41426
Malicious code in bioql PyPI...
MAL-2025-45752 Malicious code in raid-shadow-legends-promo-codes288 (npm)
The package raid-shadow-legends-promo-codes288 was found to contain malicious code...
Malicious code in raid-shadow-legends-promo-codes288 (npm)
The package raid-shadow-legends-promo-codes288 was found to contain malicious code...
Malicious code in test-mlw2-manet-promo (npm)
The package test-mlw2-manet-promo was found to contain malicious code...
MAL-2025-13935 Malicious code in a2z-promo-tool (npm)
The package a2z-promo-tool was found to contain malicious code...
MAL-2025-23431 Malicious code in islands-promo (npm)
The package islands-promo was found to contain malicious code...
Malicious code in a2z-promo-tool (npm)
The package a2z-promo-tool was found to contain malicious code...
Malicious code in islands-promo (npm)
The package islands-promo was found to contain malicious code...
Malicious code in raid-shadow-legends-promo-codes286 (npm)
The package raid-shadow-legends-promo-codes286 was found to contain malicious code...
MAL-2025-35743 Malicious code in test-mlw2-manet-promo (npm)
The package test-mlw2-manet-promo was found to contain malicious code...
CVE-2025-3863
The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the processwbelpspromoform function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Subscriber-level acces...
CVE-2024-45300
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...
CVE-2024-12627: Deserialization of Untrusted Data
The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to the captureemail AJAX action. This...
CVE-2024-12204: Missing Authorization
The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in the class-cx-rest.php file in all versions up to, and including, 1.3.5. This makes it...
CVE-2024-45300
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...
CVE-2024-45300
Vulnerability summary (CVE-2024-45300) : alf.io prior to version 2.0-M5 contains a race condition that lets an attacker bypass the promo-code usage limit and apply a discount coupon multiple times. The underlying issue is a timing gap between checking code usage and enforcing the limit, enabling ...
CVE-2024-45300 Bypassing promo code limitations with race conditions
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...