EUVD-2025-6938

Malicious code in bioql PyPI...

CVE-2025-41010

Incorrect Cross-Origin Resource Sharing CORS configuration in Hiberus Sintra. Cross-Origin Resource Sharing CORS allows browsers to make cross-domain requests in a controlled manner. This request has an “Origin” header that identifies the domain making the initial request and defines the protocol...

CVE-2025-41010 Cross-origin resource sharing (CORS) in Hiberus Sintra

Incorrect Cross-Origin Resource Sharing CORS configuration in Hiberus Sintra. Cross-Origin Resource Sharing CORS allows browsers to make cross-domain requests in a controlled manner. This request has an “Origin” header that identifies the domain making the initial request and defines the protocol...

Hiberus Sintra 安全漏洞

Hiberus Sintra is a service management platform from the Spanish company Hiberus. A security vulnerability exists in Hiberus Sintra that stems from a cross-resource sharing misconfiguration that could lead to the execution of privileged operations and access to confidential information...

ExtremeGuest Essentials 安全漏洞

ExtremeGuest Essentials is a WiFi user access and analytics platform from Extreme. A security vulnerability exists in ExtremeGuest Essentials versions prior to 25.5.0, which stems from a misconfiguration of the mandatory portal and could lead to unauthorized network access...

Termix 安全漏洞

Termix is a server management platform for Karmaa individual developers. A security vulnerability exists in Termix 1.5.0 and earlier versions, which stems from an improperly configured Nginx reverse proxy that causes the backend to obtain the proxy IP instead of the client IP, potentially leaking...

CVE-2025-60103

Missing Authorization vulnerability in CridioStudio ListingPro listingpro-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through = 2.9.8...

CVE-2025-60094

Missing Authorization vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stackable: from n/a through = 3.18.1...

CVE-2025-60166

Missing Authorization vulnerability in wpshuffle WP Subscription Forms PRO wp-subscription-forms-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscription Forms PRO: from n/a through = 2.0.5...

CVE-2025-60122

Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through = 1.1.4...

CVE-2025-60098

Missing Authorization vulnerability in Jeff Farthing Theme My Login theme-my-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theme My Login: from n/a through = 7.1.12...

CVE-2025-60106

Missing Authorization vulnerability in Roxnor EmailKit emailkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmailKit: from n/a through = 1.6.0...

CVE-2025-60097

Missing Authorization vulnerability in CodexThemes TheGem thegem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem: from n/a through = 5.10.5...

CVE-2025-58919

Missing Authorization vulnerability in guihom Wide Banner wide-banner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wide Banner: from n/a through = 1.0.4...

CVE-2025-60166 WordPress WP Subscription Forms PRO Plugin <= 2.0.5 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in wpshuffle WP Subscription Forms PRO wp-subscription-forms-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscription Forms PRO: from n/a through = 2.0.5...

PT-2025-39597

Name of the Vulnerable Software and Affected Versions WP Virtual Assistant versions through 3.0 Description An authorization issue exists in WP Virtual Assistant, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WP Virtual Assistant to a versi...

PT-2025-39607

Name of the Vulnerable Software and Affected Versions HaruTheme Frames versions through 1.5.7 Description An authorization issue exists in HaruTheme Frames due to incorrectly configured access control security levels. This allows exploitation of the system. Recommendations Update HaruTheme Frames...

WordPress plugin Netgsm 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-39529

Name of the Vulnerable Software and Affected Versions Acclectic Media Organizer versions through 1.4 Description An issue exists in Acclectic Media Organizer related to incorrectly configured access control security levels, allowing for missing authorization. Recommendations At the moment, there ...

PT-2025-39550

Name of the Vulnerable Software and Affected Versions CridioStudio ListingPro versions through 2.9.8 Description An authorization issue exists in CridioStudio ListingPro due to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Updat...