111 matches found
WordPress UIX Shortcodes <= 1.9.7 - Unauthenticated Shortcode Execution
The The Uix Shortcodes – Compatible with Gutenberg plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.9.9. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...
WordPress Uix UserCenter plugin <= 1.0.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by moonge in WordPress Plugin Uix UserCenter versions = 1.0.3...
CVE-2026-16259
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
EUVD-2026-68042
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
CVE-2026-16259
The Uix UserCenter WordPress plugin (versions through 1.0.3 ) contains an unauthenticated privilege escalation vulnerability. The flaw exists because the plugin fails to verify account ownership during unauthenticated profile-update actions and utilizes a hardcoded signing key that is identical a...
PT-2026-83394
Name of the Vulnerable Software and Affected Versions Uix UserCenter versions prior to 1.0.4 Description The Uix UserCenter WordPress plugin fails to verify if the account being modified during an unauthenticated profile-update action belongs to the requester. The process uses a token for...
CVE-2026-16259: Improper Privilege Management
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
Malicious Package
Overview box-react-uix is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @vwfs-uix/core (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7101 Malicious code in @vwfs-uix/core (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2011-0805
Unspecified vulnerability in the UIX component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect integrity via unknown vectors...
EUVD-2010-2419
Malware in sbrugna...
EUVD-2015-4943
Malware in sbrugna...
EUVD-2010-2420
Malware in sbrugna...
EUVD-2011-0817
Malware in sbrugna...
EUVD-2025-2906
Malicious code in bioql PyPI...