PT-2026-4010

Name of the Vulnerable Software and Affected Versions merkulove Scroller versions through 2.0.2 Description An issue exists in merkulove Scroller related to incorrectly configured access control security levels, allowing for missing authorization. Recommendations Update merkulove Scroller to a...

WordPress plugin Scroller has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2025-23830

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from n/a through = 1.0...

WordPress Scroller plugin <= 2.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Scroller versions = 2.0.2...

EUVD-2024-52474

Malicious code in bioql PyPI...

EUVD-2025-3197

Malicious code in bioql PyPI...

EUVD-2025-30111

Malicious code in bioql PyPI...

Malicious code in @ahmedhfarag/ngx-virtual-scroller (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66057cb43184c7c2694b0d4a8dad8c0566a4e2aa2395e63b96637dcef1455ef3 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47370 Malicious code in @ahmedhfarag/ngx-virtual-scroller (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66057cb43184c7c2694b0d4a8dad8c0566a4e2aa2395e63b96637dcef1455ef3 Any computer that has this package installed or running should be considered fully compromised. All...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

WordPress plugin NewsBoard Post and RSS Scroller 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-23467

Cross-Site Request Forgery CSRF vulnerability in vimal.ghorecha RSS News Scroller rss-news-scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through = 2.0.0...

CVE-2024-54351

Cross-Site Request Forgery CSRF vulnerability in Thomas K Landis Fancy Roller Scroller fancy-roller-scroller allows Stored XSS.This issue affects Fancy Roller Scroller: from n/a through = 1.4.0...

CVE-2025-23830

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from n/a through = 1.0...

CVE-2025-23467

Cross-Site Request Forgery CSRF vulnerability in vimal.ghorecha RSS News Scroller rss-news-scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through = 2.0.0...

CVE-2025-23830

CVE-2025-23830 affects the JB Horizontal Scroller News Ticker. The issue is a DOM-based XSS caused by improper neutralization of input during web page generation, affecting JB Horizontal Scroller News Ticker versions up to 1.0 (inclusive). No remediation details are provided in the supplied docum...

CVE-2025-23830 WordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from n/a through = 1.0...

CVE-2025-23467 WordPress RSS News Scroller plugin <= 2.0.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Vimal Ghorecha RSS News Scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through 2.0.0...

CVE-2025-23467 WordPress RSS News Scroller plugin <= 2.0.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in vimal.ghorecha RSS News Scroller rss-news-scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through = 2.0.0...

CVE-2025-23467

CVE-2025-23467 is a CSRF-enabled Stored XSS vulnerability in the WordPress RSS News Scroller plugin, affecting versions up to 2.0.0 (no fixed version details provided in the documents). The CVE entry is corroborated by Red Hat and Wordfence sources; CVSS v3.1 base score 7.1 (HIGH). No explicit re...