CVE-2026-32364: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in redqteam Turbo Manager turbo-manager allows PHP Local File Inclusion.This issue affects Turbo Manager: from n/a through 4.0.8...

EUVD-2025-17497

Malicious code in bioql PyPI...

PT-2025-33154 · WordPress · Alike

Name of the Vulnerable Software and Affected Versions: redqteam Alike - WordPress Custom Post Comparison versions through 3.0.1 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: Update to a version later than 3.0.1...

CVE-2025-31061: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redqteam Wishlist wishlist allows Reflected XSS.This issue affects Wishlist: from n/a through = 2.1.0...

PT-2025-24481 · Redqteam · Wishlist

Name of the Vulnerable Software and Affected Versions: redqteam Wishlist versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

CVE-2025-31063

Missing Authorization vulnerability in redqteam Wishlist wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist: from n/a through = 2.1.0...

CVE-2025-31063

Missing Authorization vulnerability in redqteam Wishlist wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist: from n/a through = 2.1.0...

CVE-2025-31063

CVE-2025-31063 (WordPress Wishlist) is a Missing Authorization vulnerability affecting Wishlist versions 2.1.0 and earlier. The issue stems from incorrectly configured access control, enabling unauthorized access to certain actions. The connected documents confirm the affected software (Wishlist)...

PT-2025-21667 · Redqteam · Wishlist

Name of the Vulnerable Software and Affected Versions: redqteam Wishlist versions n/a through 2.1.0 Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For versions n/a throug...

CVE-2025-31062: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in redqteam Wishlist wishlist allows Retrieve Embedded Sensitive Data.This issue affects Wishlist: from n/a through = 2.1.0...

CVE-2025-31063: Missing Authorization

Missing Authorization vulnerability in redqteam Wishlist wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist: from n/a through = 2.1.0...