EUVD-2025-52856

Malicious code in overall-cyan-fox npm...

EUVD-2025-50917

Malicious code in yodelling-coral-fox npm...

Malicious code in nosy-blush-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae8cb1c55363942d9795f98f56cd9ab2c58aabafaaa3494e44297d4cf7f2df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53009

Malicious code in nosy-blush-fox npm...

EUVD-2025-52560

Malicious code in psychiatric-chocolate-fox npm...

Malicious code in dusty-apricot-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b34cfe110582717c39037fcb0538e625de407c1cde00e19f62faa59dac071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56608

Malicious code in vocationalfoxz3n npm...

EUVD-2025-49284

Malicious code in stripedfoxz3n npm...

Malicious code in olympic_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d9005743be37aa50affd9f901dad2298382c12e61714c4e8380903df59d7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29bdd0ed79297b1d5a54dc968b6f8b9cf84c626269678f7d53944d90c9e6361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49979

Malicious code in insufficientfoxz3n npm...

EUVD-2025-48067

Malicious code in disturbingfoxz3n npm...

WordPress Orbit Fox Companion plugin <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Post Taxonomy vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Orbit Fox by ThemeIsle versions = 3.0.2...

CVE-2025-12045

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category and tag 'name' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output...

CVE-2025-12045 Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category and tag 'name' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output...

EUVD-2025-37757

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category and tag 'name' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output...

CVE-2025-12045

CVE-2025-12045 — Orbit Fox Companion (WordPress) is vulnerable to authenticated Stored XSS via the category and tag name parameters in versions up to and including 3.0.2. Exploitation requires Author+ privileges; an attacker can inject scripts that execute when users view the injected page. The c...

CVE-2025-12045 Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category and tag 'name' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output...

PT-2025-44992

Name of the Vulnerable Software and Affected Versions Orbit Fox Companion versions up to and including 3.0.2 Description The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to...

WordPress plugin Orbit Fox Companion 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-sit...