654 matches found
CVE-2025-11237
CVE-2025-11237 concerns the WordPress plugin Make Email Customizer for WooCommerce (
CVE-2025-11237 Make Email Customizer for WooCommerce <= 1.0.6 - Subscriber+ Arbitrary Options Update
The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options...
PT-2025-46299
Name of the Vulnerable Software and Affected Versions Make Email Customizer for WooCommerce WordPress plugin versions through 1.0.6 Description The software does not properly verify user permissions or validate input data in its AJAX operations. This allows any authenticated user, even those with...
WordPress plugin Make Email Customizer for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
EUVD-2025-37456
Malicious code in make-vis-flexible npm...
MAL-2025-49324 Malicious code in make-vis-flexible (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4b327a21d49613743c6cd4f96d8eeee813ad7a28252373da14202debcf4712 The package make-vis-flexible was found to contain malicious code. Source: ghsa-malware...
Malicious code in make-vis-flexible (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4b327a21d49613743c6cd4f96d8eeee813ad7a28252373da14202debcf4712 The package make-vis-flexible was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview make-vis-flexible is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: usb: Potential integer overflow in usbgmaketpg The variable tpgt in usbgmaketpg is defined as unsigned long and is assigned to tpgt-tporttpgt, which is defined as u16. This may cause an integer overflow when tpgt exceeds USHRTMAX...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: gfs2: Validating idepth for exhash directories A fuzzer test introduced corruption where the depth of the directory reached 0 in direread. This caused an undefined shift of 32 bits at the line: index = hash 32 - dip-idepth; As...
Exploit for Path Traversal in Wordpress
Как пользоваться Сохраните файл как checkcve-20...
EUVD-2000-0091
Malware in sbrugna...
EUVD-2010-0443
Malware in sbrugna...
EUVD-2008-1857
Malware in sbrugna...
EUVD-2000-0150
Malware in sbrugna...
EUVD-2004-2304
Malware in sbrugna...
EUVD-2001-0899
Malware in sbrugna...
EUVD-2001-0898
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987337)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987337 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is...