EUVD-2025-35571

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

PT-2025-43151

Name of the Vulnerable Software and Affected Versions RadiusTheme Testimonial Slider And Showcase Pro versions through 2.1.7 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows...

EUVD-2025-16468

Malicious code in bioql PyPI...

EUVD-2024-34356

Malicious code in bioql PyPI...

EUVD-2023-51618

Malicious code in bioql PyPI...

EUVD-2023-46356

Malicious code in bioql PyPI...

EUVD-2023-51619

Malicious code in bioql PyPI...

EUVD-2023-51617

Malicious code in bioql PyPI...

CVE-2025-4597

The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooslideprodeletedraftpreview AJAX action in all versions up to, and including, 1.12. This makes it possible for...

CVE-2025-48334

Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through = 1.12...

CVE-2025-4597

The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooslideprodeletedraftpreview AJAX action in all versions up to, and including, 1.12. This makes it possible for...

CVE-2025-4597 Woo Slider Pro - Drag Drop Slider Builder For WooCommerce <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooslideprodeletedraftpreview AJAX action in all versions up to, and including, 1.12. This makes it possible for...

CVE-2025-4597 Woo Slider Pro - Drag Drop Slider Builder For WooCommerce <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooslideprodeletedraftpreview AJAX action in all versions up to, and including, 1.12. This makes it possible for...

CVE-2025-4597

CVE-2025-4597 affects the WordPress plugin “Woo Slider Pro – Drag Drop Slider Builder For WooCommerce” up to version 1.12. The root cause is a missing capability check on the woo_slide_pro_delete_draft_preview AJAX action, enabling authenticated attackers with Subscriber-level access or higher to...

CVE-2025-48334

Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through 1.12. Affected action "wooslideprodeleteslider"...

CVE-2025-48334

Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through = 1.12...

CVE-2025-48334 WordPress Woo Slider Pro <= 1.12 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through = 1.12...

CVE-2025-48334 WordPress Woo Slider Pro <= 1.12 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through 1.12. Affected action "wooslideprodeleteslider"...

CVE-2025-48334

CVE-2025-48334 concerns a Missing Authorization vulnerability in the WordPress plugin Woo Slider Pro (BinaryCarpenter) up to version 1.12. The issue allows exploitation via an incorrectly configured access control for the action “woo_slide_pro_delete_slider,” enabling arbitrary content deletion a...

PT-2025-23274 · Binary Carpenter · Binarycarpenter Woo Slider Pro

Name of the Vulnerable Software and Affected Versions: BinaryCarpenter Woo Slider Pro versions 1.12 and earlier Description: The issue is related to a lack of authorization in BinaryCarpenter Woo Slider Pro, which allows the exploitation of incorrectly configured access control security levels. T...