Malicious code in gs-payments-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13deac0bd384330c745707f11e00851a1a9fabd272ad4db4f7e8badf0406ae97 Any computer that has this package installed or running should be considered...

MAL-2025-4745 Malicious code in gs-payments-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13deac0bd384330c745707f11e00851a1a9fabd272ad4db4f7e8badf0406ae97 Any computer that has this package installed or running should be considered...

CVE-2024-30443

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Testimonial Slider allows Stored XSS.This issue affects GS Testimonial Slider: from n/a through 3.1.4...

CVE-2024-30192

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Pins for Pinterest allows Stored XSS.This issue affects GS Pins for Pinterest: from n/a through 1.8.2...

CVE-2024-56262

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Coaches gs-coach allows Stored XSS.This issue affects GS Coaches: from n/a through = 1.1.0...

CVE-2024-56263

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Shots for Dribbble gs-dribbble-portfolio allows DOM-Based XSS.This issue affects GS Shots for Dribbble: from n/a through = 1.2.0...

CVE-2024-12249

The GS Insever Portfolio plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savesettings function in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

CVE-2024-56261

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins Project Showcase gs-projects allows Stored XSS.This issue affects Project Showcase: from n/a through = 1.1.1...

CVE-2023-0492

The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...

CVE-2023-0539

The GS Insever Portfolio WordPress plugin before 1.4.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0541

The GS Books Showcase WordPress plugin before 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-51530

Cross-Site Request Forgery CSRF vulnerability in GS Plugins Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation.This issue affects Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation: from n/a through 3.5.1...

CVE-2023-32593

Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through 1.6.7...

CVE-2022-4624

The GS Logo Slider WordPress plugin before 3.3.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privile...

Malicious code in gs-uitk-set-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec9d66675cce0bdb728e268927a574f11c5c89203e65d7df822ee40fe3952df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4180 Malicious code in gs-uitk-set-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec9d66675cce0bdb728e268927a574f11c5c89203e65d7df822ee40fe3952df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gs-uitk-promise-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4179 Malicious code in gs-uitk-promise-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gs-uitk-analytics-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 609e660687fb1d6fac6f8f75572df8fb5cc66e2e4c1db25a3bcab3aa22cd4cb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4178 Malicious code in gs-uitk-analytics-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 609e660687fb1d6fac6f8f75572df8fb5cc66e2e4c1db25a3bcab3aa22cd4cb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...