10 matches found
EUVD-2025-26960
Malicious code in bioql PyPI...
CVE-2025-58817
Missing Authorization vulnerability in desertthemes SoftMe softme allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SoftMe: from n/a through = 1.1.27...
CVE-2025-58817
Missing Authorization vulnerability in desertthemes SoftMe softme allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SoftMe: from n/a through = 1.1.27...
CVE-2025-58817
CVE-2025-58817 describes a Missing Authorization (Broken Access Control) vulnerability in DesertThemes SoftMe WordPress Theme, affecting versions up to 1.1.24. Root cause is incorrectly configured access control; impact is limited to exposure due to authorization gaps (CVSSv3.1/3.1 base 4.3, Medi...
CVE-2025-58817 WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability
Missing Authorization vulnerability in desertthemes SoftMe softme allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SoftMe: from n/a through = 1.1.27...
CVE-2025-58817 WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability
Missing Authorization vulnerability in desertthemes SoftMe softme allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SoftMe: from n/a through = 1.1.27...
WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Theme SoftMe versions = 1.1.27...
PT-2025-36156
Name of the Vulnerable Software and Affected Versions: SoftMe versions through 1.1.24 Description: A missing authorization flaw exists in DesertThemes SoftMe, allowing exploitation due to incorrectly configured access control security levels. Recommendations: Update SoftMe to a version beyond...
WordPress SoftMe Theme <= 1.1.24 is vulnerable to Broken Access Control
Software SoftMe Type Theme Vulnerable versions = 1.1.24 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-58817 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 73da99fa2c92 Credits Martino Spagnuolo r3verii Required...
WordPress plugin SoftMe 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...