Lucene search
K

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 9:58 a.m.4 views

Malicious code in gemini-ai-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce523af945a4246ec60ceb49c42757844915ea6b3657e989e0254ae1212aab92 The package gemini-ai-checker was found to contain malicious code...

5.7AI score
Exploits0
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.4 views

WordPress plugin Originality.ai AI Checker 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorizati...

4.3CVSS6.3AI score0.0022EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/24 8:24 a.m.9 views

CVE-2025-10901 Originality.ai AI Checker <= 1.0.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'ai_get_table'

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'aigettable' function in all versions up to, and including, 1.0.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

4.3CVSS0.00195EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/24 8:24 a.m.3 views

CVE-2025-10902 Originality.ai AI Checker <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Scan Log Deletion via ' ai_scan_result_remove'

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aiscanresultremove' function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS5.8AI score0.0022EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/10/23 10:21 p.m.7 views

WordPress Originality.ai AI Checker plugin <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Scan Log Deletion via ' ai_scan_result_remove' vulnerability

Missing Authorization to Authenticated Subscriber+ Scan Log Deletion via ' aiscanresultremove' vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Originality.ai AI Checker versions = 1.0.12...

4.3CVSS6.7AI score0.0022EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder