CVE-2024-6309

The Attachment File Icons AF Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.3. This is due to missing nonce validation in the 'afioverview' function and missing file type validation in the 'uploadicons' function...

CVE-2024-24714

Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a through 1.1.4...

CVE-2024-11623

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons. This action could only be performed by an authenticated admin user. The issue was fixed in 2024.10.4 release...

CVE-2024-11623 Stored XSS in authentik

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons. This action could only be performed by an authenticated admin user. The issue was fixed in 2024.10.4 release...

PT-2025-1668

Name of the Vulnerable Software and Affected Versions Authentik versions prior to 2024.10.4 Description The Authentik project is vulnerable to Stored XSS attacks through the upload of crafted SVG files that are used as application icons. This action could only be performed by an authenticated adm...

Malicious code in @douinfe/semi-icons (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cs-icons-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf6991c8217c461988208239682ccf9c3ea1b42f51a0d382a8360308e951a43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1086 Malicious code in cs-icons-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf6991c8217c461988208239682ccf9c3ea1b42f51a0d382a8360308e951a43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 481dd64f1bb368951028f0c7cb211c53754e51217edc6a8d89a31e8c9cc8ad9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1085 Malicious code in cs-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 481dd64f1bb368951028f0c7cb211c53754e51217edc6a8d89a31e8c9cc8ad9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in copist Icons Enricher icons-enricher allows Stored XSS.This issue affects Icons Enricher: from n/a through = 1.0.8...

CVE-2025-22573 WordPress Icons Enricher plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in copist Icons Enricher icons-enricher allows Stored XSS.This issue affects Icons Enricher: from n/a through = 1.0.8...

CVE-2025-22573 WordPress Icons Enricher plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in copist Icons Enricher allows Stored XSS.This issue affects Icons Enricher: from n/a through 1.0.8...

CVE-2025-22573

CVE-2025-22573 is a stored XSS vulnerability in the WordPress plugin Icons Enricher. The vulnerability is described as Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') and affects Icons Enricher versions from n/a through 1.0.8. The connected Red Hat entry repea...

WordPress Icons Enricher plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Icons Enricher versions = 1.0.8...

PT-2025-4562 · Unknown · Icons Enricher

Name of the Vulnerable Software and Affected Versions: Icons Enricher versions 1.0.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject malicious scripts...

WordPress plugin Icons Enricher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-38514

Missing Authorization vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Icons & Social Share Buttons: from n/a through = 3.5.7...

CVE-2023-34009

Missing Authorization vulnerability in Inisev Social Media & Share Icons ultimate-social-media-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media & Share Icons: from n/a through = 2.8.1...

CVE-2023-33998

Missing Authorization vulnerability in CyberNetikz Easy Social Icons easy-social-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Icons: from n/a through = 3.2.5...