EUVD-2024-17666

Malicious code in bioql PyPI...

EUVD-2024-16223

Malicious code in bioql PyPI...

WordPress Pearl plugin <= 1.3.7 - Missing Authorization to Unauthenticated Arbitrary Site Options Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Site Options Deletion vulnerability discovered by Lucio Sá in WordPress Plugin Pearl versions = 1.3.7...

PT-2024-18440 · WordPress · Arforms Form Builder

Name of the Vulnerable Software and Affected Versions: ARForms Form Builder plugin for WordPress versions up to, and including, 1.6.4 Description: The issue is related to a missing capability check on the arflite remove preview data function, allowing authenticated attackers with subscriber acces...