MAL-2025-1169 Malicious code in ppcp-starter-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90fda43d3ca785bdaecbd26f9143892e80c2dc56f94e46c333ea5b60b32da983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ppcp-starter-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90fda43d3ca785bdaecbd26f9143892e80c2dc56f94e46c333ea5b60b32da983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Starter Templates by FancyWP plugin <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery vulnerability

Unauthenticated Blind Server-Side Request Forgery vulnerability discovered by Francesco Carlucci in WordPress Plugin Starter Templates by FancyWP versions = 2.0.0...

Malicious code in gatsby-eui-starter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-662 Malicious code in gatsby-eui-starter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-24568

Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force Starter Templates astra-sites allows Cross Site Request Forgery.This issue affects Starter Templates: from n/a through = 4.4.9...

CVE-2025-24568 WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force Starter Templates astra-sites allows Cross Site Request Forgery.This issue affects Starter Templates: from n/a through = 4.4.9...

CVE-2025-24568

CVE-2025-24568 is a CSRF vulnerability affecting the Brainstorm Force Starter Templates plugin for WordPress, reported for versions up to 4.4.9. The NVD entry and PatchStack reference confirm the issue and CVSS v3.1 characteristics: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N, base score 4.3 (Medium). Th...

CVE-2025-24568 WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force Starter Templates astra-sites allows Cross Site Request Forgery.This issue affects Starter Templates: from n/a through = 4.4.9...

WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Starter Templates versions = 4.4.9...

PT-2025-5409 · Brainstorm Force · Brainstorm Force Starter Templates

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Starter Templates versions 4.4.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations:...

WordPress plugin Starter Templates: Cross-Site Request Forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-24568: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force Starter Templates astra-sites allows Cross Site Request Forgery.This issue affects Starter Templates: from n/a through = 4.4.9...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (4.0.0), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (4.0.0) +270 more potentially affected by CVE-2024-53299 via org.apache.wicket:wicket-core (>=10.0.0, <=10.2.0)

org.apache.wicket:wicket-core MAVEN version =10.0.0, =1.0.0, =4.0.3, =4.0.4, =7.0.3, =7.0.3, =7.0.3, =7.0.3, =0.2, =0.6.5 and more Source cves: CVE-2024-53299 Source advisory: OSV:GHSA-9CXR-76PM-J3WF...

Malicious code in packs-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f277f0e30c3047df016449f4c4f177cc9201318817736f3871eb938d0f24cfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canva-connect-api-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b678e20c1bba076695f221d78bccaa03e07883cd72690dcb6bf357845c03d3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (0.0.1-security)

platform-browser-dynamic NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 Source cves: unknown...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (0.0.1-security)

platform-browser-dynamic NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 Source cves: unknown...

Malicious code in bc-nuxt-vue-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a07ad7d45dd2f1165c59df4d8cd0fae05829dcca27e3804324adb715d3cf966d The OpenSSF Package Analysis project identified 'bc-nuxt-vue-starter' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +19897 more potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (>=1.4.0, <=1.5.12)

ch.qos.logback:logback-core MAVEN version =1.4.0, =0.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.9.0 - ai.chat2db.excel:easyexcel-plus-test 0.0.1 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 -...