1253 matches found
CVE-2025-11887
Summary (CVE-2025-11887) : The WordPress Supervisor plugin (versions ≤ 1.3.2) is vulnerable to unauthorized modification of data due to a missing capability check across several AJAX endpoints. authenticated attackers with Subscriber-level access or higher can update plugin settings. The vulnerab...
CVE-2025-10300 TopBar <= 1.0.0 - Cross-Site Request Forgery to Settings Update
The TopBar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the fmenbtopbarsavesettings function. This makes it possible for unauthenticated attackers to update the plugin's settin...
CVE-2025-10300
CVE-2025-10300 affects the WordPress TopBar plugin (versions
CVE-2025-10300 TopBar <= 1.0.0 - Cross-Site Request Forgery to Settings Update
The TopBar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the fmenbtopbarsavesettings function. This makes it possible for unauthenticated attackers to update the plugin's settin...
WordPress FunKItools plugin <= 1.0.2 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin FunKItools versions = 1.0.2...
WordPress TopBar plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by jsonc in WordPress Plugin TopBar versions = 1.0.0...
EUVD-2021-11691
Malware in sbrugna...
EUVD-2018-6840
Malware in sbrugna...
CVE-2025-9884
The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious w...
WordPress Restrict User Registration plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin Restrict User Registration versions = 1.0.1...
WordPress Comment Info Detector plugin <= 1.0.5 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin Comment Info Detector versions = 1.0.5...
EUVD-2022-25072
Malicious code in bioql PyPI...
EUVD-2023-12567
Malicious code in bioql PyPI...
EUVD-2023-59376
Malicious code in bioql PyPI...
EUVD-2022-24899
Malicious code in bioql PyPI...
EUVD-2025-25003
Malicious code in bioql PyPI...
EUVD-2023-59009
Malicious code in bioql PyPI...
EUVD-2022-51788
Malicious code in bioql PyPI...