CVE-2025-9202

CVE-2025-9202 affects ColorMag for WordPress (versions ≤ 4.0.19). The vulnerability arises from a missing capability check in the welcome_notice_import_handler(), allowing authenticated users with Subscriber-level access and above to install the ThemeGrill Demo Importer plugin and modify data. Th...

CVE-2025-9202 ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcomenoticeimporthandler function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above...

PT-2025-33905 · Themegrill +1 · Themegrill-Demo-Importer +1

Name of the Vulnerable Software and Affected Versions: ColorMag versions prior to 4.0.20 Description: The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the welcome notice import handler function. This allows authenticated...

WordPress ColorMag plugin <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ ThemeGrill Demo Importer Plugin Installation vulnerability discovered by Dmitrii Ignatyev in WordPress Theme ColorMag versions = 4.0.19...

CVE-2025-51986

An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packet...

Malicious code in @tiktok-frontend/api-demo-sample-lib2 (npm)

The package @tiktok-frontend/api-demo-sample-lib2 was found to contain malicious code...

Malicious code in api-shoppe-demo (npm)

The package api-shoppe-demo was found to contain malicious code...

Malicious code in es6-demo-react-npm2 (npm)

The package es6-demo-react-npm2 was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-v (npm)

The package @zalastax/nolb-demo-v was found to contain malicious code...

Malicious code in @zalastax/nolb-demo- (npm)

The package @zalastax/nolb-demo- was found to contain malicious code...

Malicious code in rtc-js-demo (npm)

The package rtc-js-demo was found to contain malicious code...

MAL-2025-18273 Malicious code in demo-npm-dmm (npm)

The package demo-npm-dmm was found to contain malicious code...

MAL-2025-22661 Malicious code in host-demo (npm)

The package host-demo was found to contain malicious code...

MAL-2025-18272 Malicious code in demo-npm (npm)

The package demo-npm was found to contain malicious code...

MAL-2025-19811 Malicious code in es6-demo-react-npm2 (npm)

The package es6-demo-react-npm2 was found to contain malicious code...

MAL-2025-16576 Malicious code in cas-fee-demo (npm)

The package cas-fee-demo was found to contain malicious code...

MAL-2025-11128 Malicious code in @zalastax/nolb-demo-h (npm)

The package @zalastax/nolb-demo-h was found to contain malicious code...

MAL-2025-14646 Malicious code in api-shoppe-demo (npm)

The package api-shoppe-demo was found to contain malicious code...

Malicious code in cas-fee-demo (npm)

The package cas-fee-demo was found to contain malicious code...

Malicious code in pinterest-api-demo (npm)

The package pinterest-api-demo was found to contain malicious code...