887 matches found
CVE-2025-10897: Improper Limitation of a Pathname to a Restricted Directory
The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...
CVE-2025-7526
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file deletion via renaming due to insufficient file path validation in the setuserprofileimage function in all versions up to, and including, 6.6.7. This makes it possible for...
VulnCheck KEV: CVE-2016-10960
The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...
EUVD-2005-4209
Malware in sbrugna...
EUVD-2019-5886
Malware in sbrugna...
EUVD-2008-4189
Malware in sbrugna...
EUVD-2006-5070
Malware in sbrugna...
EUVD-2014-5334
Malware in sbrugna...
EUVD-2020-10056
Malware in sbrugna...
EUVD-2006-7073
Malware in sbrugna...
EUVD-2018-8571
Malware in sbrugna...
EUVD-2006-1133
Malware in sbrugna...
EUVD-2008-3299
Malware in sbrugna...
EUVD-2006-1564
Malware in sbrugna...
EUVD-2006-1910
Malware in sbrugna...
EUVD-2009-1405
Malware in sbrugna...
EUVD-2019-10776
Malware in sbrugna...
EUVD-2006-0379
Malware in sbrugna...