4 matches found
EUVD-2018-10328
Malware in sbrugna...
EUVD-2025-5912
Malicious code in bioql PyPI...
CVE-2024-13358: Missing Authorization
The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bpdeletepage function in all versions up to, and including, 3.4.24. This makes it possible for authenticated...
CVE-2024-2025: Deserialization of Untrusted Data
The "BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages" plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.20 via deserialization of untrusted input in the getsimplerequest function. This makes it possible for...