Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

PT-2023-13224

Name of the Vulnerable Software and Affected Versions: Themify Themify Portfolio Post plugin versions 1.2.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with editor or higher permissions. This allows for malicious scripts to b...