CVE-2026-54239

FaustWP (a WordPress plugin within the Faust.js headless WordPress toolkit) contains an authentication bypass prior to version 1.8.11 . The root cause is in WPE\FaustWP\Auth\encrypt() and decrypt() (in plugins/faustwp/includes/auth/functions.php): the 16-byte initialization vector is excluded fro...

Malicious code in faustwp-core (npm)

The package faustwp-core was found to contain malicious code...

Malicious code in faustwp-cli (npm)

The package faustwp-cli was found to contain malicious code...

MAL-2025-20250 Malicious code in faustwp-cli (npm)

The package faustwp-cli was found to contain malicious code...

MAL-2025-20251 Malicious code in faustwp-core (npm)

The package faustwp-core was found to contain malicious code...

MAL-2025-20249 Malicious code in faustwp (npm)

The package faustwp was found to contain malicious code...

Malicious code in faustwp (npm)

The package faustwp was found to contain malicious code...