CVE-2025-66082

CVE-2025-66082 describes a missing authorization vulnerability in the WordPress plugin WpEvently (mage-eventpress) from the magepeopleteam. Affected versions are <= 5.0.4. The issue stems from improper access control configuration, enabling an attacker to exploit missing authorization. The pro...

EUVD-2024-2604

Malicious code in bioql PyPI...

EUVD-2024-45844

Malicious code in bioql PyPI...

EUVD-2024-2494

Malicious code in bioql PyPI...

EUVD-2025-24689

Malicious code in bioql PyPI...

EUVD-2025-7513

Malicious code in bioql PyPI...

EUVD-2024-2559

Malicious code in bioql PyPI...

EUVD-2024-2560

Malicious code in bioql PyPI...

EUVD-2024-2660

Malicious code in bioql PyPI...

Malicious code in mage-wallet-js (npm)

The package mage-wallet-js was found to contain malicious code...

MAL-2025-25756 Malicious code in mage-wallet-js (npm)

The package mage-wallet-js was found to contain malicious code...

CVE-2025-47585

CVE-2025-47585 covers the WordPress plugin Booking and Rental Manager for WooCommerce (versions

CVE-2024-52339

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maximilian Ruthe Mage Front End Forms mage-forms allows Stored XSS.This issue affects Mage Front End Forms: from n/a through = 1.1.4...

CVE-2024-45189

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

CVE-2024-45190

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request...

CVE-2024-45188

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...

CVE-2024-8072

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users...

CVE-2025-30895

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in magepeopleteam WpEvently mage-eventpress allows PHP Local File Inclusion.This issue affects WpEvently: from n/a through = 4.2.9...

CVE-2025-30887

Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through = 4.2.9...

CVE-2025-2129

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...