EUVD-2026-87897

The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital-goods files attached to any order without authorization...

CVE-2026-92995

The Verge3D Publishing and E-Commerce WordPress plugin (versions

CVE-2026-92995: Exposure of Sensitive Information to an Unauthorized Actor

The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital-goods files attached to any order without authorization...

PT-2026-99502

Name of the Vulnerable Software and Affected Versions Verge3D Publishing and E-Commerce WordPress plugin versions prior to 4.13.1 Description The plugin fails to restrict access to a file-download handler. This allows unauthenticated users to download digital-goods files attached to any order...

EUVD-2025-28161

Malicious code in bioql PyPI...

EUVD-2025-11779

Malicious code in bioql PyPI...

EUVD-2025-17283

Malicious code in bioql PyPI...

EUVD-2023-56141

Malicious code in bioql PyPI...

EUVD-2025-8360

Malicious code in bioql PyPI...

EUVD-2023-56142

Malicious code in bioql PyPI...

EUVD-2025-2933

Malicious code in bioql PyPI...

CVE-2025-49268

Missing Authorization vulnerability in Soft8Soft LLC Verge3D verge3d allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verge3D: from n/a through = 4.9.4...

CVE-2025-49268

Missing Authorization vulnerability in Soft8Soft LLC Verge3D verge3d allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verge3D: from n/a through = 4.9.4...

CVE-2025-49268

CVE-2025-49268 is a missing-authorization (broken access control) vulnerability in Verge3D by Soft8Soft. Affected software: Verge3D Publishing and E‑Commerce, versions up to and including 4.9.4 (historical range listed as from n/a through 4.9.4). Public references indicate unauthorized access con...

CVE-2025-49268 WordPress Verge3D plugin <= 4.9.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Soft8Soft LLC Verge3D verge3d allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verge3D: from n/a through = 4.9.4...

CVE-2025-49268 WordPress Verge3D plugin <= 4.9.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Soft8Soft LLC Verge3D verge3d allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verge3D: from n/a through = 4.9.4...

CVE-2025-49268: Missing Authorization

Missing Authorization vulnerability in Soft8Soft LLC Verge3D verge3d allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verge3D: from n/a through = 4.9.4...

WordPress plugin Verge3D 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-24213 · Verge3D · Verge3D

Name of the Vulnerable Software and Affected Versions: Verge3D versions 4.9.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For Verge3D versions 4.9.4 and...

WordPress Verge3D plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Hiro Code016Hiro in WordPress Plugin Verge3D versions = 4.9.3...