143 matches found
CVE-2025-53439
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through = 1.13...
EUVD-2025-204211
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through = 1.13...
CVE-2025-53439 WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through = 1.13...
CVE-2025-53439
CVE-2025-53439 affects the WordPress Harper theme (versions through 1.13). The issue is an improper control of filenames used in include/require statements, enabling PHP Local File Inclusion (LFI). Affected component: Harper theme PHP code handling file inclusion. Impact per sources: Local File I...
CVE-2025-62085 WordPress BERTHA AI plugin <= 1.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...
CVE-2025-62085
CVE-2025-62085 is a Broken Access Control / Missing Authorization vulnerability in the WordPress BERTHA AI plugin (bertha-ai-free), affecting versions up to and including 1.13. The root cause is misconfigured access control security levels. The CVE entry is supported by connected documents that i...
WordPress plugin Simple Excel Pricelist for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
CVE-2025-12096 Simple Excel Pricelist for WooCommerce <= 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Simple Excel Pricelist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricelist' shortcode in all versions up to, and including, 1.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress Simple Excel Pricelist for WooCommerce plugin <= 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple Excel Pricelist for WooCommerce versions = 1.13...
EUVD-2019-14746
Malware in sbrugna...
EUVD-2019-14742
Malware in sbrugna...
EUVD-2019-14747
Malware in sbrugna...
EUVD-2016-9539
Malware in sbrugna...
EUVD-2019-14753
Malware in sbrugna...
EUVD-2019-14743
Malware in sbrugna...
EUVD-2019-14767
Malware in sbrugna...
EUVD-2025-18776
Malicious code in bioql PyPI...
EUVD-2025-28508
Malicious code in bioql PyPI...