341 matches found
EUVD-2021-0580
Malware in sbrugna...
EUVD-2025-29548
Malicious code in bioql PyPI...
EUVD-2024-52366
Malicious code in bioql PyPI...
CVE-2025-8446
The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...
WordPress Blaze Demo Importer plugin <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install vulnerability
Missing Authorization to Authenticated Subscriber+ Limited Plugin Install vulnerability discovered by wesley wcraft in WordPress Plugin Blaze Demo Importer versions = 1.0.12...
CVE-2025-8446
The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...
CVE-2025-8446 Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...
CVE-2025-8446
CVE-2025-8446 concerns the Blaze Demo Importer plugin for WordPress (versions 1.0.12 or apply the vendor-provided fix, and validate that unauthorized plugin installations are disallowed.
CVE-2025-8446 Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...
WordPress plugin Blaze Demo Importer 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-37921
Name of the Vulnerable Software and Affected Versions: Blaze Demo Importer plugin for WordPress versions through 1.0.12 Description: The Blaze Demo Importer plugin for WordPress is susceptible to unauthorized limited plugin installation due to a missing capability check within the blaze demo...
Malicious code in cybernetics-paleobotany-xanadu-blaze (npm)
The package cybernetics-paleobotany-xanadu-blaze was found to contain malicious code...
Malicious code in quark-mdx-blaze-foundation (npm)
The package quark-mdx-blaze-foundation was found to contain malicious code...
Malicious code in webpack-command-blaze-ariel (npm)
The package webpack-command-blaze-ariel was found to contain malicious code...
Malicious code in miranda-spica-regulus-blaze (npm)
The package miranda-spica-regulus-blaze was found to contain malicious code...
Malicious code in altair-blaze-html-webpack-plugin-ora (npm)
The package altair-blaze-html-webpack-plugin-ora was found to contain malicious code...
MAL-2025-44766 Malicious code in javascript-auth0-selenology-blaze (npm)
The package javascript-auth0-selenology-blaze was found to contain malicious code...
MAL-2025-43440 Malicious code in altair-blaze-html-webpack-plugin-ora (npm)
The package altair-blaze-html-webpack-plugin-ora was found to contain malicious code...