CVE-2025-64294 WordPress WP Snow Effect plugin <= 1.1.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in d3wp WP Snow Effect wp-snow-effect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Snow Effect: from n/a through = 1.1.19...

CVE-2025-64294

CVE-2025-64294 – WordPress WP Snow Effect : The WP Snow Effect plugin (d3wp) versions up to and including 1.1.15 suffer a Missing Authorization vulnerability where a user can access functionality not properly constrained by ACLs. The issue is described as missing authorization to access restricte...

CVE-2025-64294 WordPress WP Snow Effect plugin <= 1.1.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in d3wp WP Snow Effect wp-snow-effect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Snow Effect: from n/a through = 1.1.19...

WordPress WP Snow Effect plugin <= 1.1.19 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Snow Effect versions = 1.1.19...

WordPress plugin WP Snow Effect 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-44762

Name of the Vulnerable Software and Affected Versions WP Snow Effect versions through 1.1.15 Description A missing authorization issue exists in d3wp WP Snow Effect, allowing access to functionality not properly constrained by Access Control Lists ACLs. This allows unauthorized access to...

Around 70 countries sign new UN Cybercrime Convention—but not everyone’s on board

Around 70 countries have signed the new United Nations UN Convention against Cybercrime—the first global treaty designed to combat cybercrime through unified international rules and cooperation. The treaty needs at least 40 UN member states to ratify it before it becomes international law. Once t...

CVE-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak

In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinputffuploadcompat to avoid info leak Struct ffeffectcompat is embedded twice inside uinputffuploadcompat, contains internal padding. In particular, there is a hole after struct ffreplay to satis...

EUVD-2015-0928

Malware in sbrugna...

EUVD-2018-19515

Malware in sbrugna...

EUVD-2021-11621

Malware in sbrugna...

EUVD-2021-12128

Malware in sbrugna...

EUVD-2021-1680

Malware in sbrugna...

EUVD-2015-1521

Malware in sbrugna...

EUVD-2016-4937

Malware in sbrugna...

EUVD-2006-5149

Malware in sbrugna...

EUVD-2023-45163

Malicious code in bioql PyPI...

EUVD-2022-27881

Malicious code in bioql PyPI...

CVE-2025-10192 WP Photo Effects <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppeeffect' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

PT-2025-40468

Name of the Vulnerable Software and Affected Versions WP Photo Effects plugin for WordPress versions prior to 1.2.5 Description The WP Photo Effects plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'wppe effect' shortcode. This is due to inadequate input sanitization...