EUVD-2025-201143

Malicious code in elf-stats-jubilant-ornament-641 npm...

Malicious code in elf-stats-jubilant-ornament-641 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b627f81ef3d4b49b83a86d60778eb2510e4d1cc4a7d0786394c115f194b9264 The package elf-stats-jubilant-ornament-641 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192295 Malicious code in elf-stats-jubilant-ornament-641 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b627f81ef3d4b49b83a86d60778eb2510e4d1cc4a7d0786394c115f194b9264 The package elf-stats-jubilant-ornament-641 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-201142

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-13513 Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-13513

CVE-2025-13513 refers to the WordPress plugin Clik stats, where versions up to and including 0.8 are vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] parameter due to insufficient input sanitization and output escaping. The vulnerability can allow unauthenticated attacker...

CVE-2025-13513 Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

Malicious code in elf-stats-festive-sparkler-275 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3adaeddf56adca42174e060e74d72cba7c7afff543772ffc7037f6329fe0359 The package elf-stats-festive-sparkler-275 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-201139

Malicious code in elf-stats-festive-sparkler-275 npm...

WordPress plugin Clik stats 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

CVE-2025-13513: Improper Neutralization of Input During Web Page Generation

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

Malicious code in elf-stats-frostbitten-pantry-235 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af87e8804f9d49a6b71f2546c64657549faef299f6cf99e9dfc3bf7af21a905 The package elf-stats-frostbitten-pantry-235 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201118

Malicious code in elf-stats-frostbitten-pantry-235 npm...

MAL-2025-192281 Malicious code in elf-stats-frostbitten-pantry-235 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af87e8804f9d49a6b71f2546c64657549faef299f6cf99e9dfc3bf7af21a905 The package elf-stats-frostbitten-pantry-235 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201119

Malicious code in elf-stats-candystriped-chimney-879 npm...

Malicious code in elf-stats-candystriped-chimney-879 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0591271ec85f51378648bf6e4d81b5d682e4291131e53e820e916569f77172a3 The package elf-stats-candystriped-chimney-879 was found to contain malicious code...

MAL-2025-192279 Malicious code in elf-stats-candystriped-chimney-879 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0591271ec85f51378648bf6e4d81b5d682e4291131e53e820e916569f77172a3 The package elf-stats-candystriped-chimney-879 was found to contain malicious code...

Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201114

Malicious code in elf-stats-aurora-toy-659 npm...

MAL-2025-192278 Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...