MAL-2025-15448 Malicious code in bangscripts-rest (npm)

The package bangscripts-rest was found to contain malicious code...

MAL-2025-28128 Malicious code in octans-taurus-rest-archaeometry (npm)

The package octans-taurus-rest-archaeometry was found to contain malicious code...

MAL-2025-15488 Malicious code in bartok-rest-server (npm)

The package bartok-rest-server was found to contain malicious code...

MAL-2025-21216 Malicious code in gauss-react-rest (npm)

The package gauss-react-rest was found to contain malicious code...

MAL-2025-16788 Malicious code in changelog-rest-spectron-telesto (npm)

The package changelog-rest-spectron-telesto was found to contain malicious code...

MAL-2025-32153 Malicious code in rest-cosmos-convict-jupiter (npm)

The package rest-cosmos-convict-jupiter was found to contain malicious code...

MAL-2025-23009 Malicious code in ignite-rest-exec-sedimentology (npm)

The package ignite-rest-exec-sedimentology was found to contain malicious code...

MAL-2025-21582 Malicious code in global-rest-gacrux-test (npm)

The package global-rest-gacrux-test was found to contain malicious code...

MAL-2025-17789 Malicious code in csrf-ursa-rest-carpo (npm)

The package csrf-ursa-rest-carpo was found to contain malicious code...

MAL-2025-27330 Malicious code in neuromorphic-rest-webdriver-manager-scripts (npm)

The package neuromorphic-rest-webdriver-manager-scripts was found to contain malicious code...

MAL-2025-38694 Malicious code in vulcan-rest-callback-jekyll (npm)

The package vulcan-rest-callback-jekyll was found to contain malicious code...

MAL-2025-25397 Malicious code in link-rest-client (npm)

The package link-rest-client was found to contain malicious code...

MAL-2025-15988 Malicious code in bootstrap-brane-xo-rest (npm)

The package bootstrap-brane-xo-rest was found to contain malicious code...

MAL-2025-27613 Malicious code in node-config-rest-grus-taurus (npm)

The package node-config-rest-grus-taurus was found to contain malicious code...

CVE-2025-55675 Apache Superset: Incorrect datasource authorization on REST API

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasourceid in the URL, an attacker can...

CVE-2025-52716

CVE-2025-52716 concerns the WordPress plugin WP REST Cache prior to or up to version 2025.1.0. The vulnerability is an improper control of filenames for include/require statements, enabling local file inclusion (LFI) via the PHP runtime. Affected products are WP REST Cache (WordPress plugin); no ...

CVE-2025-52716 WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Acato WP REST Cache allows PHP Local File Inclusion. This issue affects WP REST Cache: from n/a through 2025.1.0...

CVE-2025-5998

The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API...

CVE-2025-5998

The CVE-2025-5998 entry concerns the PPWP – Password Protect Pages WordPress plugin, prior to version 1.9.11. Technical details in the provided documents show that users with subscriber or higher roles can view content via the REST API, effectively bypassing password protection. The vulnerability...

PT-2025-33136 · WordPress · Ppwp – Password Protect Pages

Name of the Vulnerable Software and Affected Versions: PPWP – Password Protect Pages WordPress plugin versions prior to 1.9.11 Description: The PPWP – Password Protect Pages WordPress plugin prior to version 1.9.11 allows site content to be placed behind password authorization; however, users wit...