184 matches found
CVE-2026-81797
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
CVE-2026-81797 WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
EUVD-2026-96531
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
CVE-2026-81797 WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
CVE-2026-81797
The Buzz Stone | Magazine & Viral Blog WordPress Theme (versions
CVE-2026-81797: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Theme Buzz Stone | Magazine & Viral Blog WordPress Theme versions = 1.0.2...
CVE-2025-14484
The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify arbitrary API keys Pixabay, Unsplash, Pixels configured by site...
CVE-2025-14484
The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification in all versions up to and including 1.0.3 . The root cause is missing authorization checks , which allows unauthenticated attackers to modify arbitrary API keys for Pixabay , Unsplash , and Pixels . Attackers c...
CVE-2025-14484 Image Buzz <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary API Key Modification via 'pixabay_api' Parameter
The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify arbitrary API keys Pixabay, Unsplash, Pixels configured by site...
EUVD-2025-210982
The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify arbitrary API keys Pixabay, Unsplash, Pixels configured by site...
CVE-2025-14484 Image Buzz <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary API Key Modification via 'pixabay_api' Parameter
The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify arbitrary API keys Pixabay, Unsplash, Pixels configured by site...
CVE-2025-14484: Missing Authorization
The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify arbitrary API keys Pixabay, Unsplash, Pixels configured by site...
PT-2026-96656
Name of the Vulnerable Software and Affected Versions Image Buzz versions prior to 1.0.4 Description The Image Buzz plugin for WordPress contains missing authorization checks, allowing unauthenticated attackers to modify API keys configured by site administrators. This is achieved by manipulating...
WordPress Image Buzz plugin <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary API Key Modification vulnerability
Missing Authorization to Unauthenticated Arbitrary API Key Modification vulnerability discovered by Phat RiO in WordPress Plugin Image Buzz versions = 1.0.3...
buzz-captions (1.1.0), hyfi-ml (0.2.0) +4 more potentially affected by CVE-2026-9856 via transformers (4.39.1)
transformers PYPI version 4.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - buzz-captions 1.1.0 - hyfi-ml 0.2.0 - integral-deid =0.1.0, =4.0.0rc6, =0.0.1, =2.2.8, =2.4.5 Source cves: CVE-2026-9856 Source advisor...
buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.3.10)
yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...
buzz-captions (1.1.0), hyfi-ml (0.2.0) +4 more potentially affected by CVE-2026-9856 via transformers (4.39.1)
transformers PYPI version 4.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - buzz-captions 1.1.0 - hyfi-ml 0.2.0 - integral-deid =0.1.0, =4.0.0rc6, =0.0.1, =2.2.8, =2.4.5 Source cves: CVE-2026-9856 Source advisor...
buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.9.27)
yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...
buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.3.10)
yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...