CVE-2020-12077

The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces or capability checks, leading to remote code execution...

CVE-2025-1681

The Cardealer theme for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check and missing filename sanitization on the demo theme scheme AJAX functions in versions up to, and including, 1.6.4. This makes it possible for authenticated...

EUVD-2025-84361

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the "rtclajaxaddlistingtype", "rtclajaxupdatelistingtype", and "rtclajaxdeletelistingtype" function in all...

PT-2025-41649

Name of the Vulnerable Software and Affected Versions WPC Smart Wishlist for WooCommerce plugin for WordPress versions up to and including 5.0.3 Description The software is susceptible to an Insecure Direct Object Reference issue in several wishlist AJAX functions. This is due to a lack of...

EUVD-2020-4971

Malware in sbrugna...

EUVD-2021-25694

Malware in sbrugna...

EUVD-2020-24156

Malware in sbrugna...

EUVD-2013-0742

Malware in sbrugna...

EUVD-2024-49175

Malicious code in bioql PyPI...

EUVD-2023-59162

Malicious code in bioql PyPI...

EUVD-2023-59087

Malicious code in bioql PyPI...

EUVD-2024-48709

Malicious code in bioql PyPI...

EUVD-2024-47307

Malicious code in bioql PyPI...

EUVD-2024-44380

Malicious code in bioql PyPI...

EUVD-2024-17412

Malicious code in bioql PyPI...

EUVD-2024-17534

Malicious code in bioql PyPI...

EUVD-2025-14636

Malicious code in bioql PyPI...

EUVD-2024-51066

Malicious code in bioql PyPI...

EUVD-2024-49173

Malicious code in bioql PyPI...

PT-2025-27843 · WordPress · Wp Human Resource Management

Name of the Vulnerable Software and Affected Versions: WP Human Resource Management plugin versions 2.0.0 through 2.2.17 Description: The issue is related to missing authorization in the ajax insert employee and update employee functions. This allows authenticated attackers with Employee-level...