16 matches found
EUVD-2025-7948
Malicious code in bioql PyPI...
CVE-2025-30592
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30592
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30592
CVE-2025-30592 is a Missing Authorization vulnerability in the Advanced Dewplayer WordPress plugin (up to version 1.6). The Wordfence/WordPress vulnerability dataset indicates an Unauthorized Access issue with CVSS v3.1 base score 5.3 (Medium) and exploitation status not explicitly documented. Th...
CVE-2025-30592 WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30592 WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability
plugin = 1.6 Broken Access Control Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Advanced Dewplayer versions = 1.6...
CVE-2025-30592: Missing Authorization
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
PT-2025-12633
Name of the Vulnerable Software and Affected Versions Advanced Dewplayer versions 1.6 and earlier Description The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations For Advanced Dewplayer...
WordPress plugin Advanced Dewplayer 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Advanced Dewplayer 'dew_file' Directory Traversal Vulnerability
WordPress Advanced Dewplayer Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Directory traversal
Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...
CVE-2013-7240
Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...
CVE-2013-7240
The CVE-2013-7240 entry affects the WordPress plugin Advanced Dewplayer (version 1.2). A directory traversal flaw exists in the plugin’s download-file.php that allows an attacker to read arbitrary files by manipulating the dew_file parameter (dot-dot traversal). Exploitation details are consisten...
CVE-2013-7240: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...
PT-2014-3299
Name of the Vulnerable Software and Affected Versions Advanced Dewplayer plugin version 1.2 for WordPress Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the dew file parameter in the download-file.php file. Recommendations For Advanced Dewplayer plugin...