CVE-2025-13439

The CVE-2025-13439 entry concerns the WordPress Fancy Product Designer plugin. A vulnerability exists in the fpd_custom_uplod_file AJAX action where the url parameter is not adequately validated and is passed directly to getimagesize, enabling information disclosure. Affected are all versions up ...

EUVD-2025-10691

Malicious code in bioql PyPI...