92 matches found
WordPress UIX Shortcodes <= 1.9.7 - Unauthenticated Shortcode Execution
The The Uix Shortcodes – Compatible with Gutenberg plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.9.9. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...
WordPress Uix UserCenter plugin <= 1.0.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by moonge in WordPress Plugin Uix UserCenter versions = 1.0.3...
CVE-2026-16259
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
CVE-2026-16259
The Uix UserCenter WordPress plugin (versions prior to 1.0.4 ) is vulnerable to an unauthenticated privilege escalation vulnerability. The plugin fails to verify that the account being modified during an unauthenticated profile-update action belongs to the requester. Furthermore, the authenticati...
EUVD-2026-68042
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
CVE-2026-16259: Improper Privilege Management
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...
PT-2026-83394
Name of the Vulnerable Software and Affected Versions Uix UserCenter versions prior to 1.0.4 Description The Uix UserCenter WordPress plugin fails to verify if the account being modified during an unauthenticated profile-update action belongs to the requester. The process uses a token for...
Malicious code in @vwfs-uix/core (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7101 Malicious code in @vwfs-uix/core (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2011-0805
Unspecified vulnerability in the UIX component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect integrity via unknown vectors...
EUVD-2011-0817
Malware in sbrugna...
EUVD-2010-2419
Malware in sbrugna...
EUVD-2015-4943
Malware in sbrugna...
EUVD-2010-2420
Malware in sbrugna...
EUVD-2025-11320
Malicious code in bioql PyPI...
EUVD-2024-50103
Malicious code in bioql PyPI...