CVE-2025-68036 WordPress CubeWP plugin <= 1.1.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CubeWP: from n/a through = 1.1.27...

CVE-2025-68036

CVE-2025-68036 pertains to the CubeWP Framework (CubeWP) with a Missing Authorization flaw reported up to version 1.1.27. Wordfence notes this entry under CubeWP Framework and marks it as patched; no exploitation details are provided in the sources. Recommendation: apply the patch/upgrade to a fi...

PT-2025-53813

Name of the Vulnerable Software and Affected Versions CubeWP versions through 1.1.27 Description A missing authorization issue exists in CubeWP, allowing access to functionality that is not properly restricted by Access Control Lists ACLs. This could allow unauthorized access to certain features ...

WordPress CubeWP plugin <= 1.1.27 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by MD ISMAIL in WordPress Plugin CubeWP versions = 1.1.27...

CVE-2025-10706

The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwpaddonsupdateplugincb' function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2025-10706

The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwpaddonsupdateplugincb' function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2025-10706 Classified Pro <= 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwpaddonsupdateplugincb' function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with subscriber-level access and...

EUVD-2025-34723

The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwpaddonsupdateplugincb' function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2025-10706

CVE-2025-10706 pertains to the Classified Pro WordPress theme. Wordfence and CVE records confirm a missing capability check in cwp_addons_update_plugin_cb across all versions

EUVD-2025-30510

Malicious code in bioql PyPI...

EUVD-2024-42336

Malicious code in bioql PyPI...

EUVD-2024-28420

Malicious code in bioql PyPI...

EUVD-2024-45789

Malicious code in bioql PyPI...

EUVD-2025-19218

Malicious code in bioql PyPI...

EUVD-2025-19220

Malicious code in bioql PyPI...

EUVD-2025-17235

Malicious code in bioql PyPI...

EUVD-2025-18093

Malicious code in bioql PyPI...

EUVD-2024-42911

Malicious code in bioql PyPI...

EUVD-2025-28566

Malicious code in bioql PyPI...

CVE-2025-59569

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Stored XSS.This issue affects CubeWP: from n/a through = 1.1.26...