CVE-2025-7664

The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the checkactivatepermission permission callback for the /wp-json/presslearn/v1/activate REST API endpoint in all versions up to, and including, 1.1.1. The callback reads the client-supplied...

CVE-2025-7664 Al Pack <= 1.1.1 - Missing Authorization to Unauthenticated Premium Feature Activation via check_activate_permission Function

The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the checkactivatepermission permission callback for the /wp-json/presslearn/v1/activate REST API endpoint in all versions up to, and including, 1.1.1. The callback reads the client-supplied...

WordPress plugin AL Pack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An unauthorized access vulnerability exists in the WordPress AL Pack plugin, which stems from a lack of functionality checking of the checkactivatepermission permission callback...

PT-2025-33530 · WordPress · Al Pack For Wordpress

Name of the Vulnerable Software and Affected Versions: AL Pack for WordPress versions up to and including 1.0.2 Description: The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check activate permission permission callback for the...

CVE-2025-55165

Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database. Prior to version 0.8.3, the debug pack generated by Autocaliweb can expose sensitive configuration data, including API keys. This occurs because the todict method, used ...

CVE-2024-48892

A relative path traversal vulnerability CWE-23 in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an authenticated attacker to read arbitrary files via uploading a malicious solution pack...

Malicious code in @zalastax/nolb-dsr-pack (npm)

The package @zalastax/nolb-dsr-pack was found to contain malicious code...

Malicious code in private-pack-2 (npm)

The package private-pack-2 was found to contain malicious code...

Malicious code in poltergeist-ha-relay-pack (npm)

The package poltergeist-ha-relay-pack was found to contain malicious code...

MAL-2025-39371 Malicious code in wjb313-regret-pack (npm)

The package wjb313-regret-pack was found to contain malicious code...

MAL-2025-29492 Malicious code in poltergeist-ha-relay-pack (npm)

The package poltergeist-ha-relay-pack was found to contain malicious code...

MAL-2025-13948 Malicious code in abi-pack-framework (npm)

The package abi-pack-framework was found to contain malicious code...

MAL-2025-26229 Malicious code in metadata-ipfs-pack (npm)

The package metadata-ipfs-pack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in abi-pack-framework (npm)

The package abi-pack-framework was found to contain malicious code...

Malicious code in fast-pack-app-components (npm)

The package fast-pack-app-components was found to contain malicious code...

MAL-2025-17783 Malicious code in csp-presets-pack (npm)

The package csp-presets-pack was found to contain malicious code...

MAL-2025-23339 Malicious code in ipfs-pack (npm)

The package ipfs-pack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-20240 Malicious code in fast-pack-app-components (npm)

The package fast-pack-app-components was found to contain malicious code...

Malicious code in private-pack-1 (npm)

The package private-pack-1 was found to contain malicious code...

Malicious code in ipfs-pack (npm)

The package ipfs-pack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...