CVE-2026-81649

The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer ord...

CVE-2026-81649

The Fundiin for WooCommerce WordPress plugin, in versions up to and including 3.4.0 , suffers from a critical improper authorization vulnerability on several REST API routes . The flaw stems from the plugin relying on a hardcoded credential that is identical across all installations. This allows ...

EUVD-2026-96752

The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer ord...

WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by JunHee CHO in WordPress Plugin WPCS versions = 1.3.2...

WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by JunHee CHO in WordPress Plugin Email Essentials versions = 6.0.6...

WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by JunHee CHO in WordPress Plugin Beautiful Taxonomy Filters versions = 2.4.6...

CVE-2020-12128

DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path...

EUVD-2025-28016

Malicious code in bioql PyPI...

CVE-2025-43835

Cross-Site Request Forgery CSRF vulnerability in ktsvetkov wp-cyr-cho wp-cyr-cho allows Cross Site Request Forgery.This issue affects wp-cyr-cho: from n/a through = 0.1...

CVE-2025-43835

Cross-Site Request Forgery CSRF vulnerability in ktsvetkov wp-cyr-cho wp-cyr-cho allows Cross Site Request Forgery.This issue affects wp-cyr-cho: from n/a through = 0.1...

CVE-2025-43835

CVE-2025-43835 : WordPress plugin wp-cyr-cho (versions

PT-2025-22048 · Unknown · Wp-Cyr-Cho

Name of the Vulnerable Software and Affected Versions: wp-cyr-cho versions 0.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 0.1 and earlier, update to a versi...

WordPress plugin wp-cyr-cho 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

CVE-2025-43835: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ktsvetkov wp-cyr-cho wp-cyr-cho allows Cross Site Request Forgery.This issue affects wp-cyr-cho: from n/a through = 0.1...

cho-cci.or.jp Improper Access Control vulnerability OBB-3845226

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Leader of biggest online sextortion ring ‘Nth Room’ jailed for 40 years

By Waqas Cho Ju-Bin was accused of forcing at least 74 females, including 16 minors, into Virtual Enslavement on Nth Room to produce explicit content. This is a post from HackRead.com Read the original post: Leader of biggest online sextortion ring Nth Room jailed for 40 years...

DONG JOO CHO File Transfer iFamily Path Traversal Vulnerability

DONG JOO CHO File Transfer iFamily is a file transfer application. A path traversal vulnerability exists in DONG JOO CHO File Transfer iFamily version 2.1. A remote attacker can use this vulnerability to modify the application path in a request to compromise a local application or file system...

CVE-2020-12128

CVE-2020-12128 affects File Transfer iFamily 2.1, enabling directory traversal via the ./etc/ path. Red Hat and multiple national CNVD/NVD entries corroborate a path traversal vulnerability in iFamily 2.1, potentially allowing an attacker to influence the local application/file system. The CNVD e...

PT-2020-13054

Name of the Vulnerable Software and Affected Versions DONG JOO CHO File Transfer iFamily version 2.1 Description The issue allows directory traversal related to the ./etc/ path. This means an attacker could potentially access files or directories outside the intended directory structure by...

Joomla Component Seyret (com_seyret) - Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Joomla Component Seyret comseyret Date: 2010-06-26 Author: mlk Software Link: null Version: null Tested on: Linux,BSD and windows CVE : null Code : on paper Joomla Component Seyret comseyret - Local File Inclusion Vulnerability + Discovered by : m...