4 matches found
EUVD-2026-41368
The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8. This is due to insufficient file extension validation in the doimageupload function where user-supplied input from the acceptFileTypes POST...
9.8CVSS6AI score0.00723EPSS
SaveExploits0References2
EUVD-2024-51673
Malicious code in bioql PyPI...
7.5CVSS8.9AI score0.00433EPSS
SaveExploits0References2
EUVD-2025-4833
Malicious code in bioql PyPI...
7.5CVSS9.2AI score0.00492EPSS
SaveExploits0References4
CVE-2024-13638
The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the...
7.5CVSS0.00457EPSS
SaveExploits0References3
20