PT-2026-40705

U-SPEED AC1200 Gigabit Wi-Fi Router Model: T18-21K V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control mechanisms. An attacker with physical access to the UART pins can connect to the interface and gain...

PT-2026-23405

Name of the Vulnerable Software and Affected Versions WP Royal Royal Elementor Addons versions through 1.7.1049 Description The software contains a flaw related to the inclusion of functionality from an untrusted control sphere, potentially allowing access to functionality not properly constraine...

PT-2025-52137

Missing Authorization vulnerability in bPlugins Parallax Section block parallax-section allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Parallax Section block: from n/a through = 1.0.9...

CVE-2025-62976

Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sendle Shipping: from n/a through = 6.02...

EUVD-2025-18902

Malicious code in bioql PyPI...

EUVD-2024-52946

Malicious code in bioql PyPI...

EUVD-2024-40232

Malicious code in bioql PyPI...

EUVD-2025-21638

Malicious code in bioql PyPI...

EUVD-2025-3230

Malicious code in bioql PyPI...

EUVD-2025-17281

Malicious code in bioql PyPI...

EUVD-2024-38169

Malicious code in bioql PyPI...

EUVD-2023-27766

Malicious code in bioql PyPI...

EUVD-2025-11753

Malicious code in bioql PyPI...

EUVD-2024-37611

Malicious code in bioql PyPI...

CVE-2025-49986

CVE-2025-49986 is a Missing Authorization vulnerability in the WordPress Video List Manager plugin (versions

CVE-2025-48139 WordPress StyleAI <= 1.0.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in relentlo StyleAI allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects StyleAI: from n/a through 1.0.4...

CVE-2025-49236

Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Raychat: from n/a through = 2.1.0...

CVE-2025-26867

Missing Authorization vulnerability in Themes4WP Bulk allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk: from n/a through 1.0.11...

CVE-2025-48346

Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embed and Integrate Etsy Shop: from n/a through = 1.0.9...

CVE-2025-39449 WordPress JetWooBuilder plugin <= 2.1.18 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetWooBuilder: from n/a through = 2.1.18...