📄 WordPress ActiveDEMAND 0.2.40 Unauthenticated Shell Upload

WordPress ActiveDEMAND plugin version 0.2.40 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against...

EUVD-2024-35399

Malicious code in bioql PyPI...

EUVD-2024-30595

Malicious code in bioql PyPI...

EUVD-2025-11335

Malicious code in bioql PyPI...

EUVD-2022-39013

Malicious code in bioql PyPI...

CVE-2025-39513

Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ActiveDEMAND: from n/a through = 0.2.46...

CVE-2025-39513

Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ActiveDEMAND: from n/a through = 0.2.46...

CVE-2025-39513 WordPress ActiveDEMAND plugin <= 0.2.46 - Broken Access Control vulnerability

Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ActiveDEMAND: from n/a through = 0.2.46...

CVE-2025-39513

CVE-2025-39513 – ActiveDEMAND WordPress plugin : The connected docs identify a Missing Authorization / Broken Access Control vulnerability in the ActiveDEMAND WordPress plugin, affecting versions from n/a up to and including 0.2.46. The root cause is failure to constrain access to certain functio...

CVE-2025-39513 WordPress ActiveDEMAND <= 0.2.46 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects ActiveDEMAND: from n/a through 0.2.46...

WordPress plugin ActiveDEMAND 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-16627

Name of the Vulnerable Software and Affected Versions ActiveDEMAND versions 0.2.46 and earlier Description The issue affects ActiveDEMAND, allowing access to functionality not properly constrained by ACLs due to a Missing Authorization vulnerability. Recommendations For versions 0.2.46 and earlie...

CVE-2025-39513: Missing Authorization

Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ActiveDEMAND: from n/a through = 0.2.46...

CVE-2024-32809

Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND allows Using Malicious Files.This issue affects ActiveDEMAND: from n/a through 0.2.41...

ActiveDEMAND <= 0.2.43 - Cross-Site Request Forgery

Description The ActiveDEMAND plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.43. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown actio...

CVE-2024-35638

Cross-Site Request Forgery CSRF vulnerability in JumpDEMAND Inc. ActiveDEMAND.This issue affects ActiveDEMAND: from n/a through 0.2.43...

CVE-2024-35638 WordPress ActiveDEMAND plugin <= 0.2.43 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in JumpDEMAND Inc. ActiveDEMAND.This issue affects ActiveDEMAND: from n/a through 0.2.43...

CVE-2024-35638 WordPress ActiveDEMAND plugin <= 0.2.43 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in JumpDEMAND Inc. ActiveDEMAND.This issue affects ActiveDEMAND: from n/a through 0.2.43...

PT-2024-26584

Name of the Vulnerable Software and Affected Versions ActiveDEMAND versions 0.2.43 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the...

CVE-2024-35638: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in JumpDEMAND Inc. ActiveDEMAND.This issue affects ActiveDEMAND: from n/a through 0.2.43...