MAL-2025-22806 Malicious code in husky-zenith-less-yonder (npm)

The package husky-zenith-less-yonder was found to contain malicious code...

MAL-2025-14994 Malicious code in async-umbra-xenon-husky (npm)

The package async-umbra-xenon-husky was found to contain malicious code...

MAL-2025-17621 Malicious code in cosmochemistry-sociobiology-yakutsk-husky (npm)

The package cosmochemistry-sociobiology-yakutsk-husky was found to contain malicious code...

MAL-2025-22805 Malicious code in husky-stratigraphy-gravity-orogeny (npm)

The package husky-stratigraphy-gravity-orogeny was found to contain malicious code...

MAL-2025-14953 Malicious code in asteroid-gacrux-husky-slides (npm)

The package asteroid-gacrux-husky-slides was found to contain malicious code...

MAL-2025-29392 Malicious code in playwright-husky-redis-selenology (npm)

The package playwright-husky-redis-selenology was found to contain malicious code...

MAL-2025-35545 Malicious code in test-mlw2-husky-blobs (npm)

The package test-mlw2-husky-blobs was found to contain malicious code...

MAL-2025-21190 Malicious code in ganymede-fornax-juno-husky (npm)

The package ganymede-fornax-juno-husky was found to contain malicious code...

CVE-2025-52708

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through = 1.3.7...

CVE-2025-52708

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through = 1.3.7...

CVE-2025-52708 WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through = 1.3.7...

CVE-2025-52708 WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through = 1.3.7...

CVE-2025-52708

CVE-2025-52708 concerns the WordPress HUSKY plugin (RealMag777 HUSKY) with a local file inclusion (LFI) condition caused by improper filename handling in PHP includes/requires. Affected versions are HUSKY up to 1.3.7. Public sources document this as a PHP Remote File Inclusion/LFI issue, with sev...

WordPress plugin HUSKY 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-26404 · Husky · Husky

Name of the Vulnerable Software and Affected Versions: HUSKY versions 1.3.7 and earlier Description: The issue affects the HUSKY software, allowing for PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File...

WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin HUSKY versions = 1.3.7...

MAL-2025-4938 Malicious code in husky-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7389701dece7abfcef40d0bfff8c26f78ce0a68100f40bff5e834bf57d6e637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in husky-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7389701dece7abfcef40d0bfff8c26f78ce0a68100f40bff5e834bf57d6e637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-1796

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'woof' shortcode in all versions up to, and including, 1.3.5.1 due to insufficient input sanitization and output escaping on user supplied attributes such as...

CVE-2024-7491

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.6.1 via the woofmessengerremovesubscr AJAX action due to missing validation on the 'key' user controlled key. This makes it...