EUVD-2025-27545

Malicious code in bioql PyPI...

CVE-2025-7718

The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email...

CVE-2025-7718 Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover

The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email...

CVE-2025-7718 Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover

The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email...

CVE-2025-7718

The CVE-2025-7718 entry concerns the Resideo Plugin for Resideo - Real Estate WordPress Theme. Affected versions up to 2.5.4 allow privilege escalation via account takeover because the plugin does not properly validate a user’s identity before updating sensitive details (e.g., email). This enable...

PT-2025-37042

Name of the Vulnerable Software and Affected Versions: Resideo Plugin for Resideo - Real Estate WordPress Theme versions prior to 2.5.5 Description: The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is susceptible to privilege escalation via account takeover. The...

WordPress Resideo Plugin for Resideo - Real Estate WordPress Theme plugin <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover vulnerability

WordPress Resideo Plugin for Resideo - Real Estate WordPress Theme plugin = 2.5.4 - Authenticated Subscriber+ Insecure Direct Object Reference to Privilege Escalation via Account Takeover vulnerability discovered by Alyudin Nafiie in WordPress Plugin Resideo Plugin for Resideo versions = 2.5.4...