15742 matches found
Lovable VDP: Users can change project visibility which requires high subscription by just changing request body
A Broken Access Control vulnerability was discovered that allowed users to change project visibility to higher subscription tiers by modifying the request body. The visibility was changed from the default setting to Personal or Workspace, bypassing subscription checks and enabling unauthorized...
WordPress TS Demo Importer plugin <= 0.1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin TS Demo Importer versions = 0.1.3...
WordPress IgnitionDeck plugin <= 2.0.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin IgnitionDeck versions = 2.0.15...
WordPress Integrate Dynamics 365 CRM plugin <= 1.0.9 - Missing Authorization vulnerability
Missing Authorization vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Integrate Dynamics 365 CRM versions = 1.0.9...
WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure vulnerability
Missing Authorization to Unauthenticated Forms and Campaigns Disclosure vulnerability discovered by Rafshanzani Suhada in WordPress Plugin GiveWP versions = 4.10.0...
WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association vulnerability
Missing Authorization to Unauthenticated Forms-Campaign Association vulnerability discovered by Rafshanzani Suhada in WordPress Plugin GiveWP versions = 4.10.0...
WordPress WDesignKit plugin <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function vulnerability
Missing Authentication via wdkithandlereviewsubmission Function vulnerability discovered by Peter Thaleikis in WordPress Plugin WDesignkit versions = 1.2.16...
WordPress SiteAlert (Formerly WP Health) plugin <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure vulnerability
Missing Authorization to Unauthenticated Site Health Information Exposure vulnerability discovered by D01EXPLOIT OFFICIAL in WordPress Plugin SiteAlert Formerly WP Health versions = 1.9.8...
EUVD-2024-0908
Malicious code in bioql PyPI...
EUVD-2022-48250
Malicious code in bioql PyPI...
EUVD-2022-40384
Malicious code in bioql PyPI...
EUVD-2025-7149
Malicious code in bioql PyPI...
EUVD-2023-38838
Malicious code in bioql PyPI...
EUVD-2022-53111
Malicious code in bioql PyPI...
EUVD-2023-27446
Malicious code in bioql PyPI...
EUVD-2022-41521
Malicious code in bioql PyPI...
EUVD-2024-29004
Malicious code in bioql PyPI...
EUVD-2025-9557
Malicious code in bioql PyPI...