2747 matches found
CVE-2025-10732 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.12.1. This is due to improper access control implementation on the '/wp-json/sureforms/v1/srfm-global-settings' REST API endpoint...
SaaS Breaches Start with Tokens - What Security Teams Must Watch
Token theft is a leading cause of SaaS breaches. Discover why OAuth and API tokens are often overlooked and how security teams can strengthen token hygiene to prevent attacks. Most companies in 2025 rely on a whole range of software-as-a-service SaaS applications to run their operations. However,...
Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks
Cybersecurity researchers are calling attention to a nefarious campaign targeting WordPress sites to make malicious JavaScript injections that are designed to redirect users to sketchy sites. "Site visitors get injected content that was drive-by malware like fake Cloudflare verification," Sucuri...
Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks
Cybersecurity researchers are calling attention to a nefarious campaign targeting WordPress sites to make malicious JavaScript injections that are designed to redirect users to sketchy sites. "Site visitors get injected content that was drive-by malware like fake Cloudflare verification," Sucuri...
EUVD-2020-22840
Malware in sbrugna...
EUVD-2017-0016
Malware in sbrugna...
Server-side Request Forgery
astrojs/cloudflare is vulnerable to Server-side Request Forgery. The vulnerability is due to insufficient URL validation in the generated image optimization endpoint when the adapter is used with output: 'server' and the default imageService: 'compile', an attacker can exploit this to have the...
EUVD-2025-26878
Malicious code in bioql PyPI...
EUVD-2024-22148
Malicious code in bioql PyPI...
EUVD-2024-1042
Malicious code in bioql PyPI...
EUVD-2025-28804
Malicious code in bioql PyPI...
EUVD-2025-29441
Malicious code in bioql PyPI...
EUVD-2025-12788
Malicious code in bioql PyPI...
EUVD-2024-25142
Malicious code in bioql PyPI...
EUVD-2025-1805
Malicious code in bioql PyPI...
EUVD-2023-57473
Malicious code in bioql PyPI...
EUVD-2025-2732
Malicious code in bioql PyPI...
EUVD-2023-1504
Malicious code in bioql PyPI...