CVE-2026-48153

creationtimestamp| type| source ---|---|--- 2026-05-27 19:02:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zk2b2p2w 2026-05-27 20:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmucdcb5kf2p...

EUVD-2025-48153

Malicious code in dewi-jengkol75-sukiwir npm...

CVE-2025-48153

Cross-Site Request Forgery CSRF vulnerability in Atakan Au Import CDN-Remote Images import-cdn-remote-images allows Stored XSS.This issue affects Import CDN-Remote Images: from n/a through = 2.1.2...

CVE-2025-48153

creationtimestamp| type| source ---|---|--- 2025-07-16 11:25:13+00:00| seen| Telegram/bzw9RFx-ipC4SUcMnZ8p5hsGMiBvHwdh94NHa8DjAhCWxLQ...

CVE-2025-48153 WordPress Import CDN-Remote Images plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Atakan Au Import CDN-Remote Images import-cdn-remote-images allows Stored XSS.This issue affects Import CDN-Remote Images: from n/a through = 2.1.2...

CVE-2025-48153 WordPress Import CDN-Remote Images plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Atakan Au Import CDN-Remote Images allows Stored XSS. This issue affects Import CDN-Remote Images: from n/a through 2.1.2...

CVE-2025-48153

CVE-2025-48153 : A CSRF vulnerability in the WordPress plugin “Import CDN-Remote Images” (versions up to and including 2.1.2) can lead to stored XSS. Affected product: Import CDN-Remote Images. Root cause: CSRF in the plugin allows injection that can persist as stored XSS. CVSSv3.1 base score 7.1...

CVE-2024-48153

creationtimestamp| type| source ---|---|--- 2024-10-14 19:11:02+00:00| seen| https://t.me/cvedetector/7825...

CVE-2024-48153

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the getsubconfig function...

CVE-2024-48153

DrayTek Vigor3900 firmware 1.5.1.3 contains a command-injection vulnerability in mainfunction.cgi via the get_subconfig function, enabling an attacker to execute arbitrary commands with network access. Impact per CVSS shows high confidentiality, integrity, and availability implications (CVSS‑3.1:...