153 matches found
coderedcms (>=0.22.0, <=0.22.3), coop (>=2.14.0, <=2.15.0) +8 more potentially affected by CVE-2026-54261 via wagtail (2.14.2)
wagtail PYPI version 2.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.22.0, =2.14.0, =1.0.0rc3, =0.1.0, =3.16.1, =3.16.3 Source cves: CVE-2026-54261 Source advisory: OSV:PYSEC-2026-614...
WordPress nicen-localize-image plugin <= 1.4.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin nicen-localize-image versions = 1.4.9...
CVE-2026-7523 Alba Board <= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'card_id' Parameter
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access...
CVE-2026-7249
The Location Weather plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the splwupdateblockoptions and lwpcleanweathertransients functions in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with...
CVE-2026-8732
The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...
CVE-2026-5075
The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized script data in versions up to, and including, 4.9.7 due to sensitive internal option data being passed to wplocalizescript in post editor contexts without effective masking for...
coderedcms (>=0.22.0, <=0.22.3), coop (>=2.14.0, <=2.15.0) +8 more potentially affected by CVE-2026-44200 via wagtail (2.14.2)
wagtail PYPI version 2.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.22.0, =2.14.0, =1.0.0rc3, =0.1.0, =3.16.1, =3.16.3 Source cves: CVE-2026-44200 Source advisory: OSV:PYSEC-2026-149...
CVE-2025-11997
CVE-2025-11997 affects the WordPress plugin Document Pro Elementor – Documentation & Knowledge Base. The root cause is information exposure via frontend JS: Algolia API keys are exposed through wp_localize_script without proper access controls, enabling unauthenticated users to view keys in page ...
CVE-2025-12139
The CVE-2025-12139 vulnerability affects the File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress. The issue, present in all versions up to 1.5.3, stems from improper protection of the get_localize_data function and enables unauthenticated attackers to exfilt...
WordPress plugin integration with Google Drive: information leakage vulnerability
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin integrate-google-drive has an information disclosure vulnerability, the...
EUVD-2023-45761
Malicious code in bioql PyPI...
LimeSurvey security vulnerabilities
LimeSurvey PHPSurveyor is a set of open source online questionnaire survey program from LimeSurvey team, which supports survey program development, questionnaire publishing and data collection. A security vulnerability exists in LimeSurvey version v6.6.2 and earlier versions, which stems from an...
WordPress nicen-localize-image plugin <= 1.4.0 - Malicious Polyfill.io Embed vulnerability
Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin nicen-localize-image versions = 1.4.0...
WordPress nicen-localize-image Plugin <= 1.4.1 is vulnerable to Backdoor
Software nicen-localize-image Type Plugin Vulnerable versions = 1.4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9cc7d9fd0cd5 Credits Sansec.io Required privilege Unauthenticated Published 3 July,...
Malicious code in auto-localize (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6728 Malicious code in auto-localize (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in activeadmin_mongoid-localize (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6455 Malicious code in activeadmin_mongoid-localize (RubyGems)
--- -= Per source details. Do not edit below this line.=-...