91 matches found
CVE-2026-104769
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents o...
CVE-2026-104769 Debloat <= 1.3.0 - Unauthenticated Arbitrary File Read via 's' Search Parameter via @import url() in Reflected Search-Feed <link>
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents o...
CVE-2026-104769
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to and including 1.3.0 . The flaw exists in the 's' parameter and allows an unauthenticated visitor to read arbitrary files on the server, potentially exposing sensitive infor...
EUVD-2025-177431
Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint npm...
EUVD-2025-179454
Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin npm...
EUVD-2025-178405
Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...
EUVD-2025-177433
Malicious code in optimize-css-assets-webpack-plugin-pm2-lyra-miranda npm...
EUVD-2025-178004
Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres npm...
EUVD-2025-177430
Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...
MAL-2025-187972 Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eedff5af78c38d953cd8a24a97713690a208d01ffa5df7018314e5f3ba5667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177041
Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin npm...
EUVD-2025-177432
Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda npm...
EUVD-2025-179328
Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby npm...
EUVD-2025-176600
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris npm...
EUVD-2025-114706
Malicious code in cypress-optimize-css-assets-webpack-plugin-pino-umbriel npm...
EUVD-2025-124050
Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware npm...
EUVD-2025-115528
Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin npm...
EUVD-2025-124064
Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex npm...