WordPress plugin Popup for CF7 with Sweet Alert 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-35031

Name of the Vulnerable Software and Affected Versions: Popup for CF7 with Sweet Alert versions through 1.6.5 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge...

WordPress plugin WP Easy Contact 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers

Cybersecurity researchers are calling attention to a sophisticated social engineering campaign that's targeting supply chain-critical manufacturing companies with an in-memory malware dubbed MixShell. The activity has been codenamed ZipLine by Check Point Research. "Instead of sending unsolicited...

Malicious code in @espace-client-axafr/formulaire-contact-unifie (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41858 Malicious code in @espace-client-axafr/formulaire-contact-unifie (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41878 Malicious code in @espace-client-axafr/performance-indicator (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/contact-form (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41847 Malicious code in @espace-client-axafr/contact-form (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41823 Malicious code in @axaclient-socle-front/redux-helpers (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-56215

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter...

CVE-2025-56215

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter...

CVE-2024-39923

An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting XSS due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in...

WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by astra.r3verii in WordPress Plugin WP Easy Contact versions = 4.0.1...

CVE-2025-56215

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter...

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the pagetitle parameter of contact.php. An attacker can exploit this...

CVE-2025-56215

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter...

CVE-2024-39923

An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting XSS due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in...

CVE-2025-56215

CVE-2025-56215 affects phpgurukul Hospital Management System 4.0, with a SQL Injection in contact.php through the pagetitle parameter. The vulnerability is described as an injection flaw in a PHP/MySQL-based system. According to the CVE details, the base impact is Low for confidentiality and inte...

Malicious code in remark-canonical-link-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b975fb6f22bd9fcdcea9c2ef29c6fadc73269624920351490d8cda8e561199d The OpenSSF Package Analysis project identified...