496 matches found
CVE-2025-12777: Improper Authorization
The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.10.0. This is due to the plugin not properly verifying that a user is authorized to perform actions on the REST API /wp-json/yith/wishlist/v1/lists endpoint which uses...
CVE-2025-12427: Authorization Bypass Through User-Controlled Key
The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.10.0 via the REST API endpoint and AJAX handler due to missing validation on user-controlled keys. This makes it possible for unauthenticated attackers to...
WordPress YITH WooCommerce Wishlist plugin <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion vulnerability
Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin YITH WooCommerce Wishlist versions = 4.10.0...
EUVD-2021-23421
Malware in sbrugna...
EUVD-2021-23417
Malware in sbrugna...
EUVD-2015-9269
Malware in sbrugna...
EUVD-2025-24718
Malicious code in bioql PyPI...
EUVD-2024-36900
Malicious code in bioql PyPI...
EUVD-2024-35439
Malicious code in bioql PyPI...
EUVD-2024-35456
Malicious code in bioql PyPI...
EUVD-2024-35490
Malicious code in bioql PyPI...
EUVD-2024-34757
Malicious code in bioql PyPI...
EUVD-2024-30486
Malicious code in bioql PyPI...
EUVD-2024-28391
Malicious code in bioql PyPI...
EUVD-2024-25168
Malicious code in bioql PyPI...
EUVD-2024-47826
Malicious code in bioql PyPI...
EUVD-2024-44074
Malicious code in bioql PyPI...
EUVD-2023-50837
Malicious code in bioql PyPI...