EUVD-2022-28896

Malicious code in bioql PyPI...

CVE-2022-44279

Garage Management System v1.0 is vulnerable to Cross Site Scripting XSS via /garage/phpaction/createBrand.php...

CVE-2022-23981: Improper Access Control

The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin versions = 2.0.4...

Perfect Brands for WooCommerce < 2.0.5 - Subscriber+ Arbitrary Brand Creation

The plugin does not have authorisation and CSRF checks in some of its AJAX actions, which could allow any authenticated users, such as subscriber to create arbitrary brands...