CLSA-2026-1792369502 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792369500 TuxCare security update for @babel/helper-plugin-utils (2 CVEs)

TuxCare rebuilt @babel/helper-plugin-utils to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792369494 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792369493 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CVE-2025-69134 WordPress OpenAI Chatbot for WordPress – Helper plugin <= 1.1.4 - Arbitrary Content Deletion vulnerability

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

CVE-2025-69134 WordPress OpenAI Chatbot for WordPress – Helper plugin <= 1.1.4 - Arbitrary Content Deletion vulnerability

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

CVE-2025-69134

CVE-2025-69134: WordPress OpenAI Chatbot for WordPress – Helper plugin

EUVD-2025-210403

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

PT-2026-54964

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

CVE-2022-27214

A cross-site request forgery CSRF vulnerability in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

EUVD-2024-34010

Malicious code in bioql PyPI...

CVE-2024-8656

The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.7.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

CVE-2024-11093

The SG Helper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in version 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web...

CVE-2022-27215

A missing permission check in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

CVE-2025-39377 WordPress Appsero Helper plugin <= 1.3.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs Appsero Helper appsero-helper allows SQL Injection.This issue affects Appsero Helper: from n/a through = 1.3.4...

MAL-2025-3256 Malicious code in helper-plugin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 637e6aa11d35ac301a88fea209827ad1ebfe949fe5c2db4ffd66509975d13ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in helper-plugin-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in helper-plugin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 637e6aa11d35ac301a88fea209827ad1ebfe949fe5c2db4ffd66509975d13ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-13436

The Appsero Helper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on the 'appserohelper' page. This makes it possible for unauthenticated attackers to update settings and inject...

CVE-2024-13436

The Appsero Helper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on the 'appserohelper' page. This makes it possible for unauthenticated attackers to update settings and inject...