EUVD-2025-51905

Malicious code in sparkling-black-salmon npm...

EUVD-2025-51906

Malicious code in sparkling-apricot-asp npm...

EUVD-2025-51907

Malicious code in sparkling-amethyst-lemming npm...

EUVD-2025-51908

Malicious code in sparkling-amethyst-gazelle npm...

EUVD-2025-51904

Malicious code in sparkling-turquoise-mastodon npm...

EUVD-2025-57225

Malicious code in sparklingcockroachz3n npm...

EUVD-2025-57224

Malicious code in sparklinggoatz3n npm...

EUVD-2025-45215

Malicious code in sparklingquailz3n npm...

CVE-2024-13423

The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparklingactivateplugin' and 'sparklingdeactivateplugin' functions in versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers...

CVE-2024-13423

The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparklingactivateplugin' and 'sparklingdeactivateplugin' functions in versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers...

CVE-2024-13423 Sparkling <= 2.4.9 - Missing Authorization to Unauthenticated Arbitrary Plugin Activation/Deactivation

The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparklingactivateplugin' and 'sparklingdeactivateplugin' functions in versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers...

CVE-2024-13423 Sparkling <= 2.4.9 - Missing Authorization to Unauthenticated Arbitrary Plugin Activation/Deactivation

The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparklingactivateplugin' and 'sparklingdeactivateplugin' functions in versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers...

CVE-2024-13423

CVE-2024-13423 applies to the Sparkling WordPress theme/plugin (affected versions: ≤ 2.4.9). Root cause: missing capability checks in functions sparkle_activate_plugin and sparkle_deactivate_plugin, enabling unauthenticated users to activate/deactivate arbitrary plugins. Impact: unauthorized plug...

WordPress plugin Sparkling 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress Sparkling plugin <= 2.4.9 - Missing Authorization to Unauthenticated Arbitrary Plugin Activation/Deactivation vulnerability

Missing Authorization to Unauthenticated Arbitrary Plugin Activation/Deactivation vulnerability discovered by mikemyers in WordPress Theme Sparkling versions = 2.4.9...

CVE-2020-36708

CVE-2020-36708 : The Nuclei template confirms a remote code execution flaw in WordPress themes using the Epsilon Framework (Shapely, NewsMag, Activello, Illdy, Allegiant, Newspaper X, Pixova Lite, Brilliance, MedZone Lite, Regina Lite, Transcend, Affluent, Bonkers, Antreas, Sparkling, NatureMag L...

WordPress Sparkling theme <= 2.4.8 - Unauthenticated Function Injection vulnerability

Unauthenticated Function Injection vulnerability discovered in WordPress Sparkling theme versions = 2.4.8 by NinTechNet. Solution Update the WordPress Sparkling theme to the latest available version at least 2.4.9...