WordPress BM Content Builder plugin <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via ux_cb_page_options_save vulnerability

Missing Authorization to Authenticated Subscriber+ Stored Cross-Site Scripting via uxcbpageoptionssave vulnerability discovered by István Márton - Wordfence in WordPress Plugin BM Content Builder versions = 3.16.2.1...

METZ CONNECT多款产品 代码问题漏洞

METZ CONNECT Energy-Controlling EWIO2-M and others are products of METZ CONNECT, Germany.METZ CONNECT Energy-Controlling EWIO2-M is a high performance data logger.METZ CONNECT Energy- Controlling EWIO2-M-BM is a high performance data logger.METZ CONNECT Ethernet-IO EWIO2-BM is a sensor and actuat...

PT-2025-47291

Name of the Vulnerable Software and Affected Versions METZ CONNECT EWIO2-M versions prior to 2.2.0 METZ CONNECT Ethernet-IO EWIO2-BM versions prior to 2.2.0 Description An unauthenticated remote attacker can execute arbitrary PHP files and gain full access of the affected devices. This allows...

EUVD-2020-28714

Malware in sbrugna...

EUVD-2020-17919

Malware in sbrugna...

EUVD-2020-17921

Malware in sbrugna...

EUVD-2020-17923

Malware in sbrugna...

EUVD-2017-4273

Malware in sbrugna...

EUVD-2020-17918

Malware in sbrugna...

EUVD-2017-4274

Malware in sbrugna...

EUVD-2008-1280

Malware in sbrugna...

EUVD-2019-2633

Malware in sbrugna...

EUVD-2019-2634

Malware in sbrugna...

EUVD-2020-17920

Malware in sbrugna...

EUVD-2020-17922

Malware in sbrugna...

EUVD-2019-2635

Malware in sbrugna...

EUVD-2025-17053

Malicious code in bioql PyPI...

EUVD-2025-12384

Malicious code in bioql PyPI...

EUVD-2022-39075

Malicious code in bioql PyPI...

CVE-2025-59002 WordPress BM Content Builder Plugin < 3.16.3.3 - Arbitrary File Deletion Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SeaTheme BM Content Builder allows Path Traversal. This issue affects BM Content Builder: from n/a through n/a...