EUVD-2025-21661

Malicious code in bioql PyPI...

EUVD-2023-36749

Malicious code in bioql PyPI...

EUVD-2023-35404

Malicious code in bioql PyPI...

EUVD-2024-31395

Malicious code in bioql PyPI...

GHSA-Q475-2PGM-7HVP Apache Airflow: Connection sensitive details exposed to users with READ permissions

Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values. In Airflow 3.0.3, this model was...

CVE-2025-57969

Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar hide-wp-toolbar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide WP Toolbar: from n/a through = 2.7...

CVE-2025-57969

Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar hide-wp-toolbar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide WP Toolbar: from n/a through = 2.7...

WordPress Hide WP Toolbar Plugin <= 2.7 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin Hide WP Toolbar versions = 2.7...

CVE-2025-57969

CVE-2025-57969 affects Hide WP Toolbar (WordPress plugin) up to version 2.7. Root cause: Missing Authorization / access control misconfiguration enabling unauthorized actions. Documented CVSS v3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, with Impact: integrity low, confidentiality none, avai...

CVE-2025-57969 WordPress Hide WP Toolbar Plugin <= 2.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar hide-wp-toolbar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide WP Toolbar: from n/a through = 2.7...

CVE-2025-57969 WordPress Hide WP Toolbar Plugin <= 2.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hide WP Toolbar: from n/a through 2.7...

WordPress plugin Hide WP Toolbar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2025-38819

Name of the Vulnerable Software and Affected Versions Hide WP Toolbar versions through 2.7 Description A missing authorization issue exists in Jeremy Saxey Hide WP Toolbar, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Hide WP Toolbar to a...

CVE-2025-58849

Cross-Site Request Forgery CSRF vulnerability in Deepak S Hide Real Download Path hide-real-download-path allows Stored XSS.This issue affects Hide Real Download Path: from n/a through = 1.6...

CVE-2025-26431

In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-40664

In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitati...

CVE-2025-58849

Cross-Site Request Forgery CSRF vulnerability in Deepak S Hide Real Download Path hide-real-download-path allows Stored XSS.This issue affects Hide Real Download Path: from n/a through = 1.6...

CVE-2025-58849

CVE-2025-58849 is a CSRF vulnerability in the WordPress plugin Hide Real Download Path up to version 1.6 that can trigger Stored XSS. The provided documents do not specify a patched version; monitor for vendor updates and apply fixes when available.

CVE-2025-58849 WordPress Hide Real Download Path Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Deepak S Hide Real Download Path hide-real-download-path allows Stored XSS.This issue affects Hide Real Download Path: from n/a through = 1.6...

WordPress Hide Real Download Path Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Hide Real Download Path versions = 1.6...