CVE-2025-68579 WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Simpler SEO: from n/a through = 1.9.6...

CVE-2025-68579 WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Simpler SEO: from n/a through = 1.9.6...

CVE-2025-68579

CVE-2025-68579:FV Simpler SEO plugin suffers Missing Authorization (broken access control) vulnerability in FV Simpler SEO (fv-all-in-one-seo-pack); affected: FV Simpler SEO versions from n/a up to 1.9.6. The connected Wordfence report confirms the issue and lists the patch status as Patched, but...

PT-2025-53267

Name of the Vulnerable Software and Affected Versions FolioVision FV Simpler SEO fv-all-in-one-seo-pack versions through 1.9.6 Description An issue exists in FolioVision FV Simpler SEO fv-all-in-one-seo-pack related to incorrectly configured access control security levels, allowing for missing...

WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin FV Simpler SEO versions = 1.9.6...

WordPress Download Plugins and Themes from Dashboard plugin <= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival vulnerability

Cross-Site Request Forgery to Bulk Plugin/Theme Archival vulnerability discovered by bosz in WordPress Plugin Download Plugins and Themes from Dashboard versions = 1.9.6...

WordPress plugin Download Plugins and Themes in ZIP from Dashboard 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-44765

Name of the Vulnerable Software and Affected Versions Raspberry Pi Imager version 1.9.6 Description An issue exists in the OS customization feature of Raspberry Pi Imager. The 'public-key authentication' setting unintentionally re-adds a user's id rsa.pub key from their local Windows machine to t...

Raspberry Pi Imager 安全漏洞

Raspberry Pi Imager is an open source utility software for Raspberry Pi. A security vulnerability exists in Raspberry Pi Imager version 1.9.6, which stems from a public key authentication setting incorrectly re-adding the local idrsa.pub key to the authorizedkeys file of the Raspberry Pi, which...

EUVD-2021-19503

Malware in sbrugna...

EUVD-2025-3525

Malicious code in bioql PyPI...

EUVD-2023-50445

Malicious code in bioql PyPI...

EUVD-2023-29615

Malicious code in bioql PyPI...

WordPress Arconix FAQ plugin <= 1.9.6 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Peter Thaleikis in WordPress Plugin Arconix FAQ versions = 1.9.6...

CVE-2025-24696

Cross-Site Request Forgery CSRF vulnerability in Shafaet Alam Attire Blocks attire-blocks allows Cross Site Request Forgery.This issue affects Attire Blocks: from n/a through = 1.9.6...

CVE-2024-24768

1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text if accessed using HTTP. This issue has been patched in version 1.9.6...

CVE-2021-32707

Nextcloud Mail is a mail app for Nextcloud. In versions prior to 1.9.6, the Nextcloud Mail application does not, by default, render images in emails to not leak the read state. The privacy filter failed to filter images with a background-image CSS attribute. Note that the images were still passed...

CVE-2021-24753

The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the pending reviews page before using it in a SQL statement, leading to an authenticated SQL injection issue...

SUSE CVE-2025-32445

Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges. The EventSource and Sensor...

CVE-2025-32445

Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges. The EventSource and Sensor...