3950 matches found
Malicious code in web-vitals-help (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204b3a82026288b65a149e983d855812d21ccc8c61952dcb037c926c2b3a3452 The package web-vitals-help was found to contain malicious code. Source: ghsa-malware 93e30ad20be59206c5d91e0d2bff19f6c6969c69dc3ebc477ae0c980cc3d242...
EUVD-2025-44031
Malicious code in web-vitals-help npm...
MAL-2025-55021 Malicious code in web-vitals-help (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204b3a82026288b65a149e983d855812d21ccc8c61952dcb037c926c2b3a3452 The package web-vitals-help was found to contain malicious code. Source: ghsa-malware 93e30ad20be59206c5d91e0d2bff19f6c6969c69dc3ebc477ae0c980cc3d242...
CVE-2025-12410
The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the shcontextualhelpdashboardwidget function. This makes it possible for unauthenticated attackers to update...
CVE-2025-12410
The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the shcontextualhelpdashboardwidget function. This makes it possible for unauthenticated attackers to update...
WordPress SH Contextual Help plugin <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin SH Contextual Help versions = 3.2.1...
CVE-2025-12410
CVE-2025-12410 affects the WordPress plugin SH Contextual Help (WordPress SH Contextual Help) up to version 3.2.1. The vulnerability is a CSRF flaw caused by missing or incorrect nonce validation in the function sh_contextual_help_dashboard_widget(), allowing unauthenticated attackers to forge re...
CVE-2025-12410 SH Contextual Help <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the shcontextualhelpdashboardwidget function. This makes it possible for unauthenticated attackers to update...
WordPress plugin SH Contextual Help 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...
PT-2025-44956
The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the sh contextual help dashboard widget function. This makes it possible for unauthenticated attackers to...
CVE-2025-12410: Cross-Site Request Forgery (CSRF)
The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the shcontextualhelpdashboardwidget function. This makes it possible for unauthenticated attackers to update...
Malicious Package
Overview redux-saga-help is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2007-1061
Malware in sbrugna...
EUVD-2021-18937
Malware in sbrugna...
EUVD-2019-7439
Malware in sbrugna...
EUVD-2021-20058
Malware in sbrugna...
EUVD-2006-6513
Malware in sbrugna...
EUVD-2016-10082
Malware in sbrugna...