CVE-2026-4275

The Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.3. This is due to the use of 'returntrue' as the permissioncallback for the /installplugin and /activateplugin REST API endpoint...

CVE-2022-45804 WordPress Robo Gallery Plugin <= 3.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

MAL-2022-6191 Malicious code in sncicd-plugin-activate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322d048a49c478b4ae2b2d141d66adb4073c2b18cba9a5f42a6d70ddca6d234e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sncicd-plugin-activate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322d048a49c478b4ae2b2d141d66adb4073c2b18cba9a5f42a6d70ddca6d234e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...