468 matches found
Security Bulletin: Formidable 2.1.0–3.5.2 Uses Non-Cryptographically Secure hexoid for Filename Randomization, affects watsonx.data
Summary Formidable aka node-formidable 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographically secure." Also, there is a scenario in which only the last two characters of a hexoid...
CVE-2025-67468
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and Contact Form 7,...
CVE-2025-67468
CVE-2025-67468 affects WordPress: the WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin (cf7-salesforce) with versions up to and including 1.4.6. The issue is a Missing Authorization / Broken Access Control vulnerability allowing exploitat...
PT-2025-49884
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and Contact Form 7,...
CVE-2025-67468: Missing Authorization
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and Contact Form 7,...
WordPress plugins integrated with Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms – security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a suite of blogging platforms developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...
EUVD-2025-117372
Malicious code in formidable-maroon-dinosaur npm...
EUVD-2025-105168
Malicious code in formidablewarblerz3n npm...
Malicious code in formidable_toad_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5365098d113269e2b577f1496f0d77bb7c1fbe65ba2fd6a5107db18246f0cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-91810
Malicious code in formidablekiwiz3n npm...
EUVD-2025-79205
Malicious code in formidableorangutanz3n npm...
EUVD-2025-63978
Malicious code in formidablecapybaraz3n npm...
MAL-2025-94577 Malicious code in formidable_lamprey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d6c46d0c38a4c5589b071296bbd91b0e3887e1ec76aaee0262e57005936d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-63977
Malicious code in formidablelampreyz3n npm...
EUVD-2025-63979
Malicious code in formidablebearz3n npm...
Malicious code in formidable_puffin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1f162b2393c2811d94adc510822b7d75b197019b0b292fcd452e082ed319ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54254
Malicious code in formidable-jade-iguana npm...
EUVD-2025-54253
Malicious code in formidable-red-boa npm...