coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2023-50447 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2023-50447 Source advisory: OSV:PYSEC-2026-457...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2026-42308 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2026-42308 Source advisory: OSV:PYSEC-2026-165...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2026-42308 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2026-42308 Source advisory: OSV:GHSA-WJX4-4JCJ-G98J...

adamalib (0.1.0), bormeparser (>=0.1.1, <=0.2.3) +23 more potentially affected by CVE-2026-41066 via lxml (3.4.4)

lxml PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - adamalib 0.1.0 - bormeparser =0.1.1, =2.0.1.16012810, =2.0.1.16012810, =2.0.1.16012810, =1.0.1, =2.0.2.16012810, =2.0.1.15101417, =2.0.1.15101417,...

coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2026-27199 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2026-27199 Source advisory: OSV:PYSEC-2026-2320...

coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2026-21860 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2026-21860 Source advisory: OSV:GHSA-87HC-H4R5-73F7...

coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2025-66221 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2025-66221 Source advisory: OSV:GHSA-HGF8-39GV-G3F2...

WordPress Coil Web Monetization plugin Cross-Site Request Forgery Vulnerability

The WordPress Coil Web Monetization plugin is a WordPress plugin that allows websites to monetize content through the WebMonetizationAPI, which allows users to pay content creators directly through a browser extension. The WordPress Coil Web Monetization plugin suffers from a cross-site request...

CVE-2025-9625

The Coil Web Monetization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the coil-get-css-selector parameter handling in the mayberestrictcontent function. This makes it possible...

CVE-2025-9625

The Coil Web Monetization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the coil-get-css-selector parameter handling in the mayberestrictcontent function. This makes it possible...

CVE-2025-9625 Coil Web Monetization <= 2.0.2 - Cross-Site Request Forgery

The Coil Web Monetization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the coil-get-css-selector parameter handling in the mayberestrictcontent function. This makes it possible...

CVE-2025-9625

Affected software: WordPress Coil Web Monetization plugin. Vulnerability: Cross-Site Request Forgery due to missing/incorrect nonce validation on the coil-get-css-selector handling in the maybe_restrict_content function. Impact: Unauthenticated attackers can trigger CSS selector detection functio...

CVE-2025-9625 Coil Web Monetization <= 2.0.2 - Cross-Site Request Forgery

The Coil Web Monetization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the coil-get-css-selector parameter handling in the mayberestrictcontent function. This makes it possible...

EUVD-2025-197947

The Coil Web Monetization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the coil-get-css-selector parameter handling in the mayberestrictcontent function. This makes it possible...

PT-2025-47272

Name of the Vulnerable Software and Affected Versions Coil Web Monetization plugin for WordPress versions prior to 2.0.3 Description The software is susceptible to a Cross-Site Request Forgery CSRF issue. This is caused by inadequate nonce validation when handling the coil-get-css-selector...

CVE-2025-9625: Cross-Site Request Forgery (CSRF)

The Coil Web Monetization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the coil-get-css-selector parameter handling in the mayberestrictcontent function. This makes it possible...

WordPress plugin Coil Web Monetization 跨站请求伪造漏洞

The WordPress Coil Web Monetization plugin is a WordPress plugin that allows websites to monetize content through the WebMonetizationAPI, which allows users to pay content creators directly through a browser extension. The WordPress Coil Web Monetization plugin suffers from a cross-site request...

WordPress Coil Web Monetization plugin <= 2.0.2 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Sandeep Kambhampati in WordPress Plugin Coil Web Monetization versions = 2.0.2...

On the Vulnerability of Underwater Magnetic Induction Communication

Typical magnetic induction MI communication is commonly considered a secure underwater wireless communication UWC technology due to its non-audible and non-visible nature compared to acoustic and optical UWC technologies. However, vulnerabilities in communication systems inevitably exist and may...

aboutcode (3.0.0.dev3), agavepy (>=0.2.0, <=0.2.1) +12 more potentially affected by CVE-2025-27516 via jinja2 (2.7.3)

jinja2 PYPI version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aboutcode 3.0.0.dev3 - agavepy =0.2.0, =0.5.0, =1.0.0, =1.2.1, =1.0.22, =0.7.3, =0.0.1, =0.1.0, =0.2.4, =1.1.0, =1.7.3 Source cves: CVE-2025-27516...