CVE-2025-67562 WordPress Image Caption Hover Pro plugin < 20.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Caption Hover Pro: from n/a through 20.0...

CVE-2025-67562

CVE-2025-67562 involves a Missing Authorization vulnerability in Image Caption Hover Pro (image-caption-hover-pro), where Access Control is incorrectly configured, potentially allowing access to restricted resources. Affected: Image Caption Hover Pro versions

CVE-2025-67562 WordPress Image Caption Hover Pro plugin < 20.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Caption Hover Pro: from n/a through 20.0...

PT-2025-49936

Name of the Vulnerable Software and Affected Versions Image Caption Hover Pro versions prior to 20.0 Description An authorization issue exists in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro, allowing exploitation due to incorrectly configured access control security levels...

WordPress plugin Image Caption Hover Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-13360 Quantic Social Image Hover <= 1.0.8 - Cross-Site Request Forgery to Settings Update

The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's...

CVE-2025-13360

CVE-2025-13360 relates to the WordPress plugin Quantic Social Image Hover (versions up to and including 1.0.8). The vulnerability is a Cross-Site Request Forgery (CSRF) due to missing nonce validation on the plugin’s settings update function. Exploitation requires tricking a site administrator in...

WordPress plugin Quantic Social Image Hover 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site reques...

PT-2025-49213

The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's...

EUVD-2025-199480

Malicious code in @oku-ui/hover-card npm...

Malicious code in @oku-ui/hover-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49011592cdb157147144c2972c03c4ec153b1d0076d2aa6d45dce878247a77fc The package @oku-ui/hover-card was found to contain malicious code. Source: google-open-source-security...

Malicious code in @hover-design/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c066ac501de3af9fd156e23b5fb0317b633da301c4cf66b12f2ae8429e0970 The package @hover-design/react was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199311

Malicious code in @hover-design/react npm...

MAL-2025-191227 Malicious code in @hover-design/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c066ac501de3af9fd156e23b5fb0317b633da301c4cf66b12f2ae8429e0970 The package @hover-design/react was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199312

Malicious code in @hover-design/core npm...

Malicious code in @hover-design/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03af3ac7b52b07f33bbcc22eb9afad4255a3c9c5f5ce300953bbedb4193751e The package @hover-design/core was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191226 Malicious code in @hover-design/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03af3ac7b52b07f33bbcc22eb9afad4255a3c9c5f5ce300953bbedb4193751e The package @hover-design/core was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199078

Malicious code in hover-design-prototype npm...

Malicious code in hover-design-prototype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db96c13324b014e92e639e93401c356c60bdd7d020bc22c5327900ccbab0220a The package hover-design-prototype was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190965 Malicious code in hover-design-prototype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db96c13324b014e92e639e93401c356c60bdd7d020bc22c5327900ccbab0220a The package hover-design-prototype was found to contain malicious code. Source: ghsa-malware...