EUVD-2024-51660

Malicious code in bioql PyPI...

CVE-2024-13539

The AForms Eats plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.3.1. This is due the /vendor/aura/payload-interface/phpunit.php file being publicly accessible and displaying error messages. This makes it possible for unauthenticated attackers to...

CVE-2024-13539

The AForms Eats plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.3.1. This is due the /vendor/aura/payload-interface/phpunit.php file being publicly accessible and displaying error messages. This makes it possible for unauthenticated attackers to...

CVE-2024-13539

The AForms Eats plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.3.1. This is due the /vendor/aura/payload-interface/phpunit.php file being publicly accessible and displaying error messages. This makes it possible for unauthenticated attackers to...

CVE-2024-13539

CVE-2024-13539 affects the AForms Eats WordPress plugin and enables Full Path Disclosure in all versions up to 1.3.1. The issue stems from publicly accessible /vendor/aura/payload-interface/phpunit.php which displays error messages, allowing unauthenticated attackers to retrieve the web app’s ful...

PT-2025-6427 · WordPress · Aforms Eats

Name of the Vulnerable Software and Affected Versions: AForms Eats plugin for WordPress versions up to, and including, 1.3.1 Description: The issue is related to Full Path Disclosure, which occurs due to the /vendor/aura/payload-interface/phpunit.php file being publicly accessible and displaying...