CVE-2025-11499

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the setfeaturedimagefromexternalurl function in all versions up to, and including, 1.1.32. This makes it possible f...

CVE-2025-11499 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the setfeaturedimagefromexternalurl function in all versions up to, and including, 1.1.32. This makes it possible f...

CVE-2025-6440 WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdpsavecanvasdesignajax' function in all versions up to, and including, 1.9.26. This mak...

EUVD-2021-25136

Malware in sbrugna...

EUVD-2019-16812

Malware in sbrugna...

EUVD-2012-6569

Malware in sbrugna...

EUVD-2012-6597

Malware in sbrugna...

EUVD-2014-3460

Malware in sbrugna...

EUVD-2019-13127

Malware in sbrugna...

EUVD-2025-21749

Malicious code in bioql PyPI...

EUVD-2023-50013

Malicious code in bioql PyPI...

EUVD-2022-4300

Malicious code in bioql PyPI...

EUVD-2024-16698

Malicious code in bioql PyPI...

EUVD-2025-19208

Malicious code in bioql PyPI...

EUVD-2025-28003

Malicious code in bioql PyPI...

EUVD-2025-25752

Malicious code in bioql PyPI...

EUVD-2023-37668

Malicious code in bioql PyPI...

EUVD-2021-31416

Malicious code in bioql PyPI...

CVE-2025-8120

Due to client-controlled permission check parameter, PAD CMS's upload photo functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution.This issue affects all 3 templates: www, b...

CVE-2025-7063

Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, b...