89 matches found
WordPress UIX Shortcodes <= 1.9.7 - Unauthenticated Shortcode Execution
The The Uix Shortcodes – Compatible with Gutenberg plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.9.9. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...
CVE-2026-16259
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
EUVD-2026-68042
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
CVE-2026-16259
CVE-2026-16259 affects the Uix UserCenter WordPress plugin through version 1.0.3 . The plugin's unauthenticated profile-update action fails to verify that the modified account belongs to the requester and authenticates the action with a token whose signing key is hardcoded and identical across ev...
CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
PT-2026-83394
Name of the Vulnerable Software and Affected Versions Uix UserCenter versions prior to 1.0.4 Description The Uix UserCenter WordPress plugin fails to verify if the account being modified during an unauthenticated profile-update action belongs to the requester. The process uses a token for...
Malicious code in @vwfs-uix/core (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7101 Malicious code in @vwfs-uix/core (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2011-0805
Unspecified vulnerability in the UIX component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect integrity via unknown vectors...
EUVD-2010-2419
Malware in sbrugna...
EUVD-2011-0817
Malware in sbrugna...
EUVD-2015-4943
Malware in sbrugna...
EUVD-2010-2420
Malware in sbrugna...
EUVD-2025-11320
Malicious code in bioql PyPI...
EUVD-2025-3820
Malicious code in bioql PyPI...
EUVD-2024-50103
Malicious code in bioql PyPI...
EUVD-2023-1089
Malicious code in bioql PyPI...
EUVD-2025-2906
Malicious code in bioql PyPI...
CVE-2023-27479
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with view rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper...
CVE-2025-39574
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UIUX Lab Uix Shortcodes uix-shortcodes allows Stored XSS.This issue affects Uix Shortcodes: from n/a through = 2.0.4...