PT-2025-41227

Name of the Vulnerable Software and Affected Versions Chartify – WordPress Chart Plugin versions prior to 3.5.9 Description The software contains a missing authentication check for a critical function. An unauthenticated AJAX action is registered, dispatching to admin-class methods based on a...

EUVD-2020-24144

Malware in sbrugna...

EUVD-2021-11157

Malware in sbrugna...

EUVD-2020-4391

Malware in sbrugna...

EUVD-2021-11629

Malware in sbrugna...

EUVD-2021-11754

Malware in sbrugna...

EUVD-2021-11664

Malware in sbrugna...

EUVD-2021-11728

Malware in sbrugna...

EUVD-2021-11669

Malware in sbrugna...

EUVD-2021-0665

Malware in sbrugna...

EUVD-2019-3474

Malware in sbrugna...

EUVD-2017-18004

Malware in sbrugna...

EUVD-2021-11267

Malware in sbrugna...

EUVD-2012-1200

Malware in sbrugna...

EUVD-2021-11682

Malware in sbrugna...

EUVD-2021-11695

Malware in sbrugna...

CVE-2025-9243

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the getccorders and updateorderstatus functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with...

CVE-2025-11227

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetForm', 'registerGetForms', 'registerGetCampaign' and 'registerGetCampaigns' functions due to a missing capability check...

CVE-2025-10212

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

EUVD-2025-32424

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.10.0 via the 'registerGetForm', 'registerGetForms', 'registerGetCampaign' and 'registerGetCampaigns' functions due to a missing capability check...