EUVD-2025-4739

Malicious code in bioql PyPI...

WordPress Apptivo Business Site CRM plugin <= 5.3 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin Apptivo Business Site CRM versions = 5.3...

CVE-2024-13405

The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation on the 'awpipdeny' page. This makes it possible for unauthenticated attackers to block IP addresses via a...