387 matches found
CVE-2025-66130
CVE-2025-66130 corresponds to a missing/incorrect authorization vulnerability in the WordPress plugin WP Views Counter (wpecounter) prior to or equal to version 2.1.2. The issue is described as broken access control (missing authorization) that could allow an attacker with no privileges to perfor...
CVE-2025-14731
A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CTParser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a...
PT-2025-51336
Name of the Vulnerable Software and Affected Versions CTCMS Content Management System versions up to 2.1.2 Description A weakness exists in CTCMS Content Management System up to version 2.1.2. This issue affects an unknown function within the /ctcms/apps/libraries/CT Parser.php library of the...
CVE-2025-12512
The GenerateBlocks plugin for WordPress is vulnerable to information exposure due to missing object-level authorization checks in versions up to, and including, 2.1.2. This is due to the plugin registering multiple REST API routes under generateblocks/v1/meta/ that gate access with...
CVE-2025-12512
CVE-2025-12512 (GenerateBlocks, WordPress) : Information exposure due to missing object-level authorization on REST endpoints exposed by generateblocks/v1/meta/. Authenticated users with Contributor+ can query arbitrary user/post meta and key data via get_user_meta_rest, exposing PII such as name...
WordPress plugin Helloprint 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
MAL-2025-190578 Malicious code in node-calculator-cf8c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da96ce055040828362e8a000e3ad2e1a1647b7d3faa0c4383c260d6044bef7d The package node-calculator-cf8c was found to contain malicious code. Source: ossf-package-analysis...
CVE-2025-13251
The CVE-2025-13251 entry concerns WeiYe-Jing datax-web up to 2.1.2, where an unknown function can be manipulated to cause SQL injection. Multiple sources (NVD, Red Hat RH:CVE-2025-13251, CNNVD-202511-1817, EUVD-2025-197731, osv) describe remote exploitation with published exploits. Impact is desc...
PT-2025-45278
Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for WooCommerce user-registration-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Custom User Registration Fields for WooCommerce: from n/a through = 2.1.2...
WordPress plugin Custom User Registration Fields for WooCommerce 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...
EUVD-2020-25298
Malware in sbrugna...
EUVD-2020-25297
Malware in sbrugna...
EUVD-2020-3455
Malware in sbrugna...
EUVD-2021-1080
Malware in sbrugna...
EUVD-2016-1704
Malware in sbrugna...
EUVD-2020-3454
Malware in sbrugna...
EUVD-2016-9933
Malware in sbrugna...
EUVD-2008-5861
Malware in sbrugna...