CVE-2025-8720 Plugin README Parser <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via target Parameter

The Plugin README Parser plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘target’ parameter in all versions up to, and including, 1.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-8720

CVE-2025-8720 (Plugin README Parser) affects WordPress Plugin README Parser versions up to and including 1.3.15. The root cause is insufficient input sanitization and output escaping for the target parameter, enabling a Stored Cross-Site Scripting (XSS) attack. Exploitation requires authenticated...

PT-2025-33466 · WordPress · Plugin Readme Parser

Name of the Vulnerable Software and Affected Versions: Plugin README Parser versions up to and including 1.3.15 Description: The Plugin README Parser plugin for WordPress is susceptible to Stored Cross-Site Scripting via the target parameter due to insufficient input sanitization and output...

Linux Distros Unpatched Vulnerability : CVE-2025-43972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a...

Linux Distros Unpatched Vulnerability : CVE-2022-21304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and...

Linux Distros Unpatched Vulnerability : CVE-2025-23157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: venus: hfiparser: add check to avoid out of bound access There is a possibility that initcodecs is invoked multiple times during manipulated payload from...

Malicious code in powerquery-parser (npm)

The package powerquery-parser was found to contain malicious code...

Malicious code in boby_parser (npm)

The package bobyparser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in tweakers.net-html-parser (npm)

The package tweakers.net-html-parser was found to contain malicious code...

Malicious code in dslash-parser (npm)

The package dslash-parser was found to contain malicious code...

Malicious code in json-packet-parser (npm)

The package json-packet-parser was found to contain malicious code...

Malicious code in graphql-shorthand-parser2 (npm)

The package graphql-shorthand-parser2 was found to contain malicious code...

Malicious code in @zalastax/nolb-parser (npm)

The package @zalastax/nolb-parser was found to contain malicious code...

MAL-2025-31736 Malicious code in rbx-parser-ts (npm)

The package rbx-parser-ts was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-39384 Malicious code in wms-capabilities-parser (npm)

The package wms-capabilities-parser was found to contain malicious code...

MAL-2025-16710 Malicious code in cello-ini-parser (npm)

The package cello-ini-parser was found to contain malicious code...

Malicious code in qbirc-parser (npm)

The package qbirc-parser was found to contain malicious code...

Malicious code in gateway-query-parser (npm)

The package gateway-query-parser was found to contain malicious code...

Malicious code in sightly-parser (npm)

The package sightly-parser was found to contain malicious code...

Malicious code in npm-babel-parser (npm)

The package npm-babel-parser was found to contain malicious code...