CVE-2025-8142 Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'

The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'headerlayout' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the serve...

Malicious code in down-load-available-zip-now-113116-at-weddings-wpwot-cqpsxb (npm)

The package down-load-available-zip-now-113116-at-weddings-wpwot-cqpsxb was found to contain malicious code...

Malicious code in omicron-load-import-stub-thread (npm)

The package omicron-load-import-stub-thread was found to contain malicious code...

Malicious code in down-load-available-zip-now-18341-x-xcib7-hnjfai (npm)

The package down-load-available-zip-now-18341-x-xcib7-hnjfai was found to contain malicious code...

Malicious code in down-load-available-zip-now-246213-articulation-ezaoj-nnjghf (npm)

The package down-load-available-zip-now-246213-articulation-ezaoj-nnjghf was found to contain malicious code...

Malicious code in load-cat-container-hot-book (npm)

The package load-cat-container-hot-book was found to contain malicious code...

Malicious code in fork-serialize-secure-grid-load (npm)

The package fork-serialize-secure-grid-load was found to contain malicious code...

Malicious code in avail-able-albu-m-down-load-2013-5888-false-idols-dclra-zgmhec (npm)

The package avail-able-albu-m-down-load-2013-5888-false-idols-dclra-zgmhec was found to contain malicious code...

Malicious code in down-lo-ad-now-zip-mp3-i-am-the-fun-blame-monster-31e3h-wgxkex (npm)

The package down-lo-ad-now-zip-mp3-i-am-the-fun-blame-monster-31e3h-wgxkex was found to contain malicious code...

Malicious code in load-hot-info-delta-encode (npm)

The package load-hot-info-delta-encode was found to contain malicious code...

Malicious code in down-load-now-9a82i-vc3fui (npm)

The package down-load-now-9a82i-vc3fui was found to contain malicious code...

Malicious code in protected-emulate-star-fire-load (npm)

The package protected-emulate-star-fire-load was found to contain malicious code...

MAL-2025-15131 Malicious code in ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu (npm)

The package ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu was found to contain malicious code...

MAL-2025-18693 Malicious code in down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf (npm)

The package down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf was found to contain malicious code...

Malicious code in down-load-available-songs-in-the-key-of-life-1-0w495-lciybu (npm)

The package down-load-available-songs-in-the-key-of-life-1-0w495-lciybu was found to contain malicious code...

Malicious code in void-rho-load-double-benchmark (npm)

The package void-rho-load-double-benchmark was found to contain malicious code...

MAL-2025-20547 Malicious code in file-load-validate-cat-decode (npm)

The package file-load-validate-cat-decode was found to contain malicious code...

MAL-2025-38555 Malicious code in void-rho-load-double-benchmark (npm)

The package void-rho-load-double-benchmark was found to contain malicious code...

MAL-2025-37773 Malicious code in uniform-alb-project (npm)

The package uniform-alb-project was found to contain malicious code...

MAL-2025-20568 Malicious code in finally-enum-byte-kappa-load (npm)

The package finally-enum-byte-kappa-load was found to contain malicious code...