1862 matches found
PT-2025-43510
Name of the Vulnerable Software and Affected Versions Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress versions up to and including 5.1.0 Description The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator...
CVE-2025-6833: Authorization Bypass Through User-Controlled Key
The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0 via the 'aiotimeclocklitejs' AJAX action due to missing validation on a user controlled key. This makes it...
PT-2025-42820
Name of the Vulnerable Software and Affected Versions Element Pack Addons for Elementor plugin for WordPress versions up to and including 8.2.5 Description The Element Pack Addons for Elementor plugin for WordPress is susceptible to a Blind Server-Side Request Forgery issue. This affects versions...
CVE-2020-36854 Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
The Async JavaScript plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.19.07.14. This is due to missing authorization checks on the ajsteps AJAX aciton along with a lack on sanitization on the settings saved via the function. This makes it...
PT-2025-42690
Name of the Vulnerable Software and Affected Versions WPC Smart Wishlist for WooCommerce plugin for WordPress versions through 5.0.4 Description The WPC Smart Wishlist for WooCommerce plugin for WordPress is susceptible to unauthorized data access. A missing capability check on the wishlist...
CVE-2025-10706: Missing Authorization
The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwpaddonsupdateplugincb' function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with subscriber-level access and...
PT-2025-42295
Name of the Vulnerable Software and Affected Versions Library Management System plugin for WordPress versions prior to 3.2 Description The Library Management System plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check within the owt7...
CVE-2025-10303: Missing Authorization
The Library Management System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the owt7librarymanagementajaxhandler function in all versions up to, and including, 3.1. This makes it possible for authenticated attackers, with...
CVE-2025-10587: Improper Neutralization of Special Elements used in an SQL Command
The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
EUVD-2020-30786
Malware in sbrugna...
CVE-2025-9243: Missing Authorization
The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the getccorders and updateorderstatus functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with...
CVE-2025-8726: Improper Neutralization of Input During Web Page Generation
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
EUVD-2024-32436
Malicious code in bioql PyPI...
EUVD-2024-51731
Malicious code in bioql PyPI...
EUVD-2024-34347
Malicious code in bioql PyPI...
EUVD-2024-33332
Malicious code in bioql PyPI...
EUVD-2024-33407
Malicious code in bioql PyPI...
EUVD-2024-49173
Malicious code in bioql PyPI...