EUVD-2025-6717

Malicious code in bioql PyPI...

CVE-2024-12922

CVE-2024-12922 affects the WordPress Altair theme (versions <= 5.2.4). A missing capability check in functions.php allows unauthenticated users to perform an arbitrary options update via pp_import_current, enabling privilege escalation (e.g., changing registration default role to administrator...