84 matches found
Malicious code in dolyame-boxy-independent-bnpl-picture-gallery (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2f5f635baa82fb1cc166956476dc3d7560c0c5d9e49a29aa4123256fdd9310 On require of the package, index.js unconditionally loads bootstrap.js, which selects a platform-specific endpoint and downloads an opaque binary fro...
MAL-2026-13001 Malicious code in bnpl-blocks-mobile-bnpl-picture-gallery (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab6b4486cfd526c741063bd79f43ac71b870f9dc859dd2057c35f1121166443 On require, bootstrap.js selects a platform-specific asset path and downloads a binary from one of several Cloudflare Workers hostnames whose names a...
Malicious Package
Overview dolyame-boxy-desktop-bnpl-picture-gallery is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
CVE-2026-57696
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
CVE-2026-57696
The CVE concerns the WordPress Picture Gallery plugin (WordPress plugin) with versions
CVE-2026-57696 WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
EUVD-2026-48171
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
CVE-2026-57696 WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
PT-2026-63829
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
CVE-2026-57696: Improper Limitation of a Pathname to a Restricted Directory
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by hhhai in WordPress Plugin Picture Gallery versions = 1.6.5...
EUVD-2021-34811
WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...
CVE-2021-47951
WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...
CVE-2021-47951
CVE-2021-47951 concerns WordPress Picture Gallery 1.4.2, which has a stored cross-site scripting (XSS) flaw. The vulnerability allows authenticated attackers to inject JavaScript through the Edit Content URL field in the Access Control settings; payloads stored in the database can execute when th...
CVE-2021-47951
WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...
CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL
WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...
CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL
WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...
WordPress plugin Picture Gallery 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2021-47951: Improper Neutralization of Input During Web Page Generation
WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...