WP e-Commerce Shop Styling <= 2.5 - Authenticated Directory Traversal / Arbitrary File Read

WP e-Commerce Shop Styling plugin for WordPress versions 2.5 and below contains a directory traversal vulnerability in includes/download.php. The 'filename' parameter is passed directly to readfile without sanitization, allowing authenticated users to read arbitrary files on the server. Any...

CVE-2025-10656: Incorrect Authorization

The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.37 vi the userfilter function. This makes it possible for unauthenticated attackers to create admin accounts...

EUVD-2011-5004

Malware in sbrugna...

EUVD-2012-5233

Malware in sbrugna...

EUVD-2023-46349

Malicious code in bioql PyPI...

EUVD-2025-17529

Malicious code in bioql PyPI...

EUVD-2024-16469

Malicious code in bioql PyPI...

EUVD-2025-12071

Malicious code in bioql PyPI...

EUVD-2025-17526

Malicious code in bioql PyPI...

EUVD-2025-17525

Malicious code in bioql PyPI...

EUVD-2025-7914

Malicious code in bioql PyPI...

EUVD-2024-46131

Malicious code in bioql PyPI...

EUVD-2025-17524

Malicious code in bioql PyPI...

EUVD-2023-46350

Malicious code in bioql PyPI...

CVE-2025-48129

Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP...

CVE-2025-48123

Improper Control of Generation of Code 'Code Injection' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Code Injection.This issue affects Spreadsheet Price Changer for...

CVE-2025-48122

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows SQL Injection.This issue affects...

CVE-2025-48124

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Path Traversal.This issue affects Spreadsheet...

CVE-2025-48129

Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP...

CVE-2025-48123

Improper Control of Generation of Code 'Code Injection' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Code Injection.This issue affects Spreadsheet Price Changer for...