EUVD-2026-29444

The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2026-6813

The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2026-6813 Continually <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually_embed_code' Parameter

The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2026-6813 Continually <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually_embed_code' Parameter

The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

WordPress plugin Continually 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. In...

PT-2026-40002

The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

WordPress Continually plugin <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Kazuma Matsumoto - GMO Cybersecurity by IERAE, Inc. in WordPress Plugin Continually versions = 4.3.1...

MAL-2025-175318 Malicious code in kapvino-sofgdi-gagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47788f0cd96ee4b8b914011f2b3787b2172d1f3d1f6c2fe6767cd02af86b06be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4c87fd3bd10586b17c56d8c8e54836eed064c8959d4c19832f2a517d20444e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133213 Malicious code in erwin-lumpur45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6bf553b72eeba38dad16f2d65f4aae034ad6879e2f3f21f19ade9e27fdb2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-empal78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af9167f91bb57f553515755d2d3728ab64698e2c2bc99243460573b6f3db0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_spider_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000f848e05202f7e049cd7de6638cc918f580ec8d3720777b417e5e7107c011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97762 Malicious code in erick-telurtahu88-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff89064b5c838ab1214ec63a66865a2c947d3c98a730d7b3b388538402c34f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasicampur64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f3f9a881df587aead74d528f96b0971d122da28e8373d2b083f6439f480302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89649 Malicious code in putri-empal57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0123e8e8cb8500e2538e1a70f7b9c0cf2355b19ecc85ac81bbbd8cbfb74ad68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88993 Malicious code in ocha-kue43-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f0f7a80af7e40aa21159657c94433175c0bc45c9aef57bf328579e12432070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79117 Malicious code in jaja-asinan35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a264091d388061322d089350e3340ec9d15fc4e6f2589393f0b66dee9440a70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-nasi32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28cf4da043541be5ad915c896e29cc6f7098dde4e09a11ea59080ac80a0d7d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21fa23bb3c10f00eb61fa09e18a57da4d83a7b95da725c70a8f0d835517adef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58570 Malicious code in rural_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1919c0312200186ad7ea85f1b70c2dba9f2ab26f111b63a8257d28a63a032a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...