ROS-20251014-10

The vulnerability in the Jenkins Automation Server is due to a vulnerable plugin not performing validation of of permissions in the sidebar. Exploitation of the vulnerability could allow an attacker acting remotely, gain unauthorized access to features that would otherwise be restricted...

EUVD-2019-10913

Malware in sbrugna...

CVE-2025-11228

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the registerAssociateFormsWithCampaign function in all versions up to, and including, 4.10.0. This makes it possible for unauthenticat...

EUVD-2023-58686

Malicious code in bioql PyPI...

EUVD-2022-51470

Malicious code in bioql PyPI...

EUVD-2023-44316

Malicious code in bioql PyPI...

EUVD-2022-46642

Malicious code in bioql PyPI...

EUVD-2022-46638

Malicious code in bioql PyPI...

EUVD-2023-54123

Malicious code in bioql PyPI...

EUVD-2025-15323

Malicious code in bioql PyPI...

EUVD-2024-51664

Malicious code in bioql PyPI...

EUVD-2024-51671

Malicious code in bioql PyPI...

EUVD-2022-5525

Malicious code in bioql PyPI...

EUVD-2024-34365

Malicious code in bioql PyPI...

WordPress plugin Qubely 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

WordPress plugin OceanWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Medium: vim

Issue Overview: Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction...

CVE-2025-48731

Summary : CVE-2025-48731 affects Mattermost Confluence Plugin versions

WordPress AI Engine Information Disclosure Vulnerability

WordPress AI Engine is a plugin based on OpenAI technology, which is mainly used to integrate artificial intelligence features into WordPress websites to improve the efficiency of content generation, automated operations and so on. WordPress AI Engine suffers from an information disclosure...

WordPress plugin Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...