184 matches found
EUVD-2018-0115
Malware in sbrugna...
EUVD-2015-3287
Malware in sbrugna...
EUVD-2021-34212
Malicious code in bioql PyPI...
EUVD-2024-51462
Malicious code in bioql PyPI...
EUVD-2021-31835
Malicious code in bioql PyPI...
EUVD-2023-58194
Malicious code in bioql PyPI...
EUVD-2025-24197
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-4390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the...
WordPress WP Private Content Plus plugin information disclosure vulnerability
WordPress WP Private Content Plus plugin is a WordPress plugin that is mainly used for permission control of website content and supports access restrictions on posts, pages, custom content types, navigation menus, plugins and attachments. WordPress WP Private Content Plus plugin suffers from an...
CVE-2025-4390
The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validaterestrictions' function. This makes it possible for unauthenticated attackers to extract sensitive data including the content of resticted...
CVE-2025-4390
The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validaterestrictions' function. This makes it possible for unauthenticated attackers to extract sensitive data including the content of resticted...
UBUNTU-CVE-2025-4390
The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validaterestrictions' function. This makes it possible for unauthenticated attackers to extract sensitive data including the content of resticted...
CVE-2025-4390 WP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure
The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validaterestrictions' function. This makes it possible for unauthenticated attackers to extract sensitive data including the content of resticted...
CVE-2025-4390
CVE-2025-4390 affects the WordPress plugin WP Private Content Plus (versions up to 3.6.2). The vulnerability is a Sensitive Information Exposure via the validate_restrictions function, allowing unauthenticated attackers to extract sensitive data, including restricted posts on archive and feed pag...
CVE-2025-4390 WP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure
The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validaterestrictions' function. This makes it possible for unauthenticated attackers to extract sensitive data including the content of resticted...
WordPress plugin WP Private Content Plus 信息泄露漏洞
WordPress WP Private Content Plus plugin is a WordPress plugin that is mainly used for permission control of website content and supports access restrictions on posts, pages, custom content types, navigation menus, plugins and attachments. WordPress WP Private Content Plus plugin suffers from an...
WordPress WP Private Content Plus plugin <= 3.6.2 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by Luca Epifanio Bitcube Security in WordPress Plugin WP Private Content Plus versions = 3.6.2...
CVE-2024-8483
The MAS Static Content plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.8 via the staticcontent function. This makes it possible for authenticated attackers, with contributor-level access and above, to extract potentially sensitive information...
CVE-2021-24780
The Single Post Exporter WordPress plugin through 1.1.1 does not have CSRF checks when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and give access to the export feature to any role such as subscriber. Subscriber users would then be able...
CVE-2021-24819
The Page/Post Content Shortcode WordPress plugin through 1.0 does not have proper authorisation in place, allowing users with a role as low as contributor to access draft/private/password protected/trashed posts/pages they should not be allowed to, including posts created by other users such as...