91 matches found
CVE-2026-104769
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents o...
CVE-2026-104769 Debloat <= 1.3.0 - Unauthenticated Arbitrary File Read via 's' Search Parameter via @import url() in Reflected Search-Feed <link>
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents o...
CVE-2026-104769
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to and including 1.3.0 . The flaw exists in the 's' parameter and allows an unauthenticated visitor to read arbitrary files on the server, potentially exposing sensitive infor...
EUVD-2025-178004
Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres npm...
EUVD-2025-179328
Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby npm...
EUVD-2025-177041
Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin npm...
EUVD-2025-177430
Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...
EUVD-2025-176600
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris npm...
EUVD-2025-178405
Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...
EUVD-2025-177431
Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint npm...
EUVD-2025-179454
Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin npm...
EUVD-2025-177433
Malicious code in optimize-css-assets-webpack-plugin-pm2-lyra-miranda npm...
MAL-2025-187972 Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eedff5af78c38d953cd8a24a97713690a208d01ffa5df7018314e5f3ba5667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177432
Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda npm...
EUVD-2025-121269
Malicious code in thuban-optimize-css-assets-webpack-plugin-phenomic-grus npm...
EUVD-2025-124055
Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze npm...
EUVD-2025-122245
Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...
EUVD-2025-111193
Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap npm...