12230 matches found
CVE-2025-64382
CVE-2025-64382 affects the WordPress plugin Order Export & Order Import for WooCommerce (versions through 2.6.7). The issue is Missing Authorization/Broken Access Control due to incorrectly configured access control security levels, enabling unauthorized access to the plugin’s order-export/import...
CVE-2025-12979
The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'uscesexport' action in all versions up to, and including, 2.11.24. This makes it possible for unauthenticated attackers to access configured payment credentials ex...
EUVD-2025-150409
The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'uscesexport' action in all versions up to, and including, 2.11.24. This makes it possible for unauthenticated attackers to access configured payment credentials ex...
CVE-2025-12979
CVE-2025-12979 describes an unauthorized data exposure vulnerability in the WordPress plug‑in Welcart e-Commerce . A missing capability check on the usces_export action affects all versions up to and including 2.11.24 , allowing unauthenticated attackers to access sensitive data such as configure...
EUVD-2025-176219
Malicious code in star-route-query-export-process npm...
EUVD-2025-178961
Malicious code in export-decompress-integer-encrypt-void npm...
EUVD-2025-176138
Malicious code in sun-throw-export-xml-java npm...
EUVD-2025-177828
Malicious code in minify-permission-xi-route-export npm...
EUVD-2025-175946
Malicious code in throw-simple-old-export-info npm...
EUVD-2025-178957
Malicious code in export-zero-orchestrate-zero-compile npm...
EUVD-2025-180455
Malicious code in alpha-integer-pi-assert-export npm...
EUVD-2025-177464
Malicious code in omicron-final-fire-export-star npm...
MAL-2025-189336 Malicious code in sandbox-export-integer-alpha-java (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6426877b9703b2cc29ae7e3069049eb2d4cfe9a922f49dea5024fe34d259c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sun-throw-export-xml-java (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a8c5c8cb4363555683f11715c0cc35f6b75890f98cdcb908f646ad221baa6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180323
Malicious code in array-async-export-lambda-transpile npm...
EUVD-2025-176538
Malicious code in sandbox-final-enum-export-emulate npm...
EUVD-2025-179685
Malicious code in cold-cron-object-chi-export npm...
EUVD-2025-176305
Malicious code in socket-minify-export-catch-file npm...
Malicious code in unix-web-export-key-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d60838cb059ad234ae83460587017a2a0124557f3c34684256b7ffcf37b12d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...