573 matches found
CVE-2025-11174 Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure
The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6. This is due to the plugin exposing an unauthenticated AJAX action dllloadposts which returns a JSON table of document data without performing nonce or capability...
CVE-2025-11174
CVE-2025-11174 affects WordPress Document Library Lite plugin. All versions up to 1.1.6 permit improper authorization via an unauthenticated AJAX action (dll_load_posts) exposed through wp-admin/admin-ajax.php, returning a JSON table of document data without nonce or capability checks. The attack...
WordPress plugin Document Library Lite 授权问题漏洞
WordPress Document Library Lite plugin is a WordPress plugin for creating document libraries and download management features with support for multiple file types and responsive layouts. The WordPress Document Library Lite plugin suffers from an improper authorization vulnerability that stems fro...
PT-2025-44695
Name of the Vulnerable Software and Affected Versions Document Library Lite versions prior to 1.1.7 Description The Document Library Lite plugin for WordPress has an issue with authorization. An unauthenticated AJAX action, dll load posts, exposes a JSON table of document data without proper...
DRUPAL-CONTRIB-2025-112
CivicTheme is a design system and theme framework used to build content-rich Drupal websites. It includes editorial workflows, structured content types, and flexible theming components. The theme doesn't sufficiently check access to entities when they are displayed as reference cards used in manu...
CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112
CivicTheme is a design system and theme framework used to build content-rich Drupal websites. It includes editorial workflows, structured content types, and flexible theming components. The theme doesn't sufficiently check access to entities when they are displayed as reference cards used in manu...
GHSA-64MV-9655-37HX drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS
Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...
EUVD-2007-5572
Malware in sbrugna...
EUVD-2018-0514
Malware in sbrugna...
EUVD-2018-0728
Malware in sbrugna...
EUVD-2018-0427
Malware in sbrugna...
EUVD-2009-2073
Malware in sbrugna...
EUVD-2018-0358
Malware in sbrugna...
EUVD-2013-4453
Malware in sbrugna...
EUVD-2021-10241
Malware in sbrugna...
EUVD-2018-0364
Malware in sbrugna...
EUVD-2018-0288
Malware in sbrugna...
EUVD-2014-1478
Malware in sbrugna...