Malicious code in fca-pro (npm)

The package fca-pro was found to contain malicious code...

MAL-2025-28895 Malicious code in pass-culture-pro (npm)

The package pass-culture-pro was found to contain malicious code...

MAL-2025-40533 Malicious code in yingyu-pro-erlingerlingyier-erlingeryilingsi (npm)

The package yingyu-pro-erlingerlingyier-erlingeryilingsi was found to contain malicious code...

MAL-2025-20304 Malicious code in fca-pro (npm)

The package fca-pro was found to contain malicious code...

Malicious code in yingyu-pro-erlingerlingyier-erlingeryilingsi (npm)

The package yingyu-pro-erlingerlingyier-erlingeryilingsi was found to contain malicious code...

MAL-2025-29674 Malicious code in pro-dj-link-to-midi (npm)

The package pro-dj-link-to-midi was found to contain malicious code...

Malicious code in pro-dj-link-to-midi (npm)

The package pro-dj-link-to-midi was found to contain malicious code...

Malicious code in yingyu-pro-erlingeryilingqi-erlingererlingqi (npm)

The package yingyu-pro-erlingeryilingqi-erlingererlingqi was found to contain malicious code...

MAL-2025-31049 Malicious code in qs-test-pro (npm)

The package qs-test-pro was found to contain malicious code...

CVE-2025-53581

CVE-2025-53581 is a stored XSS vulnerability in the artiosmedia RSS Feed Pro WordPress plugin (versions up to 1.1.8). The root cause is improper input neutralization during web page generation, allowing stored JavaScript in the feed output. Impact: low to moderate per CVSS 3.1 metrics (base score...

CVE-2025-53581 WordPress RSS Feed Pro Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artiosmedia RSS Feed Pro allows Stored XSS. This issue affects RSS Feed Pro: from n/a through 1.1.8...

CVE-2025-53581 WordPress RSS Feed Pro Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artiosmedia RSS Feed Pro rss-feed-pro allows Stored XSS.This issue affects RSS Feed Pro: from n/a through = 1.1.8...

WordPress RSS Feed Pro Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin RSS Feed Pro versions = 1.1.8...

Norway Blames Pro-Russian Hackers for Dam Cyberattack

Norway says pro-Russian hackers breached a dam in Bremanger in April, opening a water valve for 4 hours…...

WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Real Estate Manager Pro versions = 12.7.3...

CVE-2025-54673

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.5.3...

CVE-2025-54673

Chartify (WordPress Chart Plugin)

PT-2025-33377 · Artiosmedia · Artiosmedia Rss Feed Pro

Name of the Vulnerable Software and Affected Versions: artiosmedia RSS Feed Pro versions through 1.1.8 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which results in a Stored Cross-site Scripting condition. Recommendations: Update...

CVE-2025-54673: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.5.3...

CVE-2025-52728: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...