EUVD-2025-34829

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

WordPress Automatic Featured Images from Videos plugin <= 1.2.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Marek Mikita in WordPress Plugin Automatic Featured Images from Videos versions = 1.2.4...