PSA: Supply Chain Compromise in BdThemes Ecosystem via Poisoned API Response

The Wordfence Threat Intelligence Team was notified on August 7th, 2026 of a supply chain compromise affecting BdThemes, a WordPress plugin vendor whose plugins are available in the official WordPress plugins directory. Currently, all the affected plugins are temporarily closed pending a full...

PT-2024-26272 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms via the component "admin/banner deal.php?mudi=add". This allows for potential unauthorized actions. Recommendations: For idccms version 1.35, as...

CVE-2024-35010

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/bannerdeal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6...

PT-2024-26290 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/banner deal.php component. The mudi, dataType, dataTypeCN, theme, and dataID parameters are involved. This allows for unauthorized action...

CVE-2018-18725

An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5...

YUNUCMS cross-site scripting vulnerability (CNVD-2018-23277)

YUNUCMS is a three-network, self-substation system of open source content management system. YUNUCMS 1.1.5 admin/banner/editbanner?id=20 cross-site scripting vulnerability , attackers can exploit the vulnerability of cross-site attacks...

CVE-2018-18725: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5...

PT-2018-14603

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description A cross-site scripting XSS issue was found. The issue is related to the "admin/banner/editbanner?id=20" API endpoint. Recommendations For YUNUCMS version 1.1.5, update to a version that includes a fix for this...

CVE-2016-9455

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery CSRF. A number of scripts in Revive Adserver's user interface are vulnerable to CSRF attacks: "www/admin/banner-acl.php", "www/admin/banner-activate.php", "www/admin/banner-advanced.php", "www/admin/banner-modify.php",...

CVE-2016-9455: Cross-Site Request Forgery (CSRF)

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery CSRF. A number of scripts in Revive Adserver's user interface are vulnerable to CSRF attacks: www/admin/banner-acl.php, www/admin/banner-activate.php, www/admin/banner-advanced.php, www/admin/banner-modify.php,...

PT-2014-3006

Name of the Vulnerable Software and Affected Versions OpenX versions 2.8.11 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that delete various components, including users, advertisers, banners, campaigns, channels, affiliate...