134 matches found
EUVD-2021-14500
Malware in sbrugna...
EUVD-2020-26904
Malware in sbrugna...
EUVD-2019-13566
Malware in sbrugna...
EUVD-2025-6943
Malicious code in bioql PyPI...
EUVD-2022-30450
Malicious code in bioql PyPI...
EUVD-2021-7553
Malicious code in bioql PyPI...
EUVD-2024-1364
Malicious code in bioql PyPI...
EUVD-2025-10693
Malicious code in bioql PyPI...
WordPress plugin Maspik – Ultimate Spam Protection 跨站请求伪造漏洞
WordPress Heateor Maspik - Ultimate Spam Protection plugin is an anti-spam plugin designed specifically for WordPress that protects contact forms, comment areas and signup forms from spam through a variety of technical means. The WordPress Maspik - Ultimate Spam Protection plugin suffers from a...
CVE-2025-55147
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to execute sensitive actions on behalf of...
WordPress Related Posts Lite plugin cross-site request forgery vulnerability
WordPress Related Posts Lite plugin is a tag-based relevance of the article recommendation plugin, mainly used to improve the site content relevance and user browsing experience. A cross-site request forgery vulnerability exists in the WordPress Related Posts Lite plugin, which stems from missing...
WordPress plugin Related Posts Lite 跨站请求伪造漏洞
WordPress Related Posts Lite plugin is a tag-based relevance of the article recommendation plugin, mainly used to improve the site content relevance and user browsing experience. A cross-site request forgery vulnerability exists in the WordPress Related Posts Lite plugin, which stems from missing...
Complaint Management System Cross-Site Request Forgery Vulnerability
Complaint Management System is a complaint management system. The Complaint Management System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could use this...
CVE-2025-53483
The Mediawiki - SecurePoll extension is vulnerable to Cross-Site Request Forgery (CSRF) because the ArchivePage.php , UnarchivePage.php , and VoterEligibilityPage#executeClear() components fail to validate request methods or CSRF tokens. An attacker can trick an administrator into visiting a mali...
CVE-2025-53483: Cross-Site Request Forgery (CSRF)
ArchivePage.php, UnarchivePage.php, and VoterEligibilityPageexecuteClear do not validate request methods or CSRF tokens, allowing attackers to trigger sensitive actions if an admin visits a malicious site. This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42....
Car Rental Portal Cross-Site Request Forgery Vulnerability
Car Rental Portal is a rental car portal. Car Rental Portal suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. The vulnerability can be exploited by an attacker to spoof a...
WordPress plugin Change Cart button Colors WooCommerce 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Change Cart button Colors WooCommerce plugin, which arises from a web application that does not adequately...
WordPress plugin ClipLink 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress ClipLink plugin, which arises from a web application that does not adequately validate that a request is comin...
CVE-2022-25810
The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tpreset” under the Utilities tab /wp-admin/admin.php?page=tputils, which can be used/executed as the lowest-privileged user. Basically all Utilities functionalities are vulnerable th...