179 matches found
PT-2025-51058
The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the script adder present in posts in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it...
EUVD-2025-37090
Malicious code in epic-ue-header-footer npm...
MAL-2025-49203 Malicious code in epic-ue-header-footer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8916b8659dcf92d4ab60426bcf793346da11211f92f9499c8b445410cc453246 The package epic-ue-header-footer was found to contain malicious code...
Malicious code in epic-ue-header-footer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8916b8659dcf92d4ab60426bcf793346da11211f92f9499c8b445410cc453246 The package epic-ue-header-footer was found to contain malicious code...
EUVD-2021-11703
Malware in sbrugna...
EUVD-2023-43682
Malicious code in bioql PyPI...
EUVD-2024-33303
Malicious code in bioql PyPI...
EUVD-2022-15785
Malicious code in bioql PyPI...
EUVD-2024-46909
Malicious code in bioql PyPI...
EUVD-2023-54538
Malicious code in bioql PyPI...
EUVD-2024-45461
Malicious code in bioql PyPI...
MAL-2025-47878 Malicious code in ancestry-header-footer-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a91f13b12dd2c038ea932a4b439d5a9c46856babdb64d5e4c6671cb31d1bd59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-9289 Malicious code in @sellerly/sellzone-semrush2-header-footer (npm)
The package @sellerly/sellzone-semrush2-header-footer was found to contain malicious code...
Malicious code in @sellerly/sellzone-semrush2-header-footer (npm)
The package @sellerly/sellzone-semrush2-header-footer was found to contain malicious code...
CVE-2025-8488
The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savehfecompatibilityoptioncallback function in all versions up to, and including, 2.4.6. This makes it...
CVE-2024-5006
The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘size’ parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2024-51629
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MetricThemes Header Footer Composer for Elementor header-footer-composer allows DOM-Based XSS.This issue affects Header Footer Composer for Elementor: from n/a through = 1.0.4...
CVE-2024-3473
The Header Footer Code Manager Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 1.0.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-10794
The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.6 via the 'bhf' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...