864 matches found
EUVD-2025-205741
Missing Authorization vulnerability in Gal Dubinski My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.3.3...
CVE-2025-68995
Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.3.3...
CVE-2025-68995 WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.3.3...
CVE-2025-68995
Technical details about CVE-2025-68995 are not provided in the supplied documents. The connected Wordfence report lists many vulnerabilities but does not disclose specifics for this CVE. Monitor for official advisories.
CVE-2025-68995 WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.3.3...
PT-2025-53884
Name of the Vulnerable Software and Affected Versions My Sticky Elements versions prior to 2.3.3 Description The software contains a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations Update My Sticky Elements to a version...
WordPress plugin My Sticky Elements 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-68995: Missing Authorization
Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.3.3...
WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin My Sticky Elements versions = 2.3.3...
Stored Cross Site Scripting (XSS)
starcitizentools/citizen-skin is vulnerable to Stored Cross Site Scripting XSS. The vulnerability is due to improper handling of system message content in the sticky header, where innerHTML is assigned from user-editable message text, which allows an attacker with interface message edit privilege...
Malicious code in sticky-black-possum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffba703d7a05da998beebba7645051ceceea61bf4bf3c101284d3fc248be1762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117061
Malicious code in sticky-black-possum npm...
EUVD-2025-117060
Malicious code in sticky-blush-cardinal npm...
Malicious code in sticky_bee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74820ec20e11854d41976fda98d2cd8125b2eb69dabedb134f7e1749eda1d23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102071
Malicious code in stickybeez3n npm...
EUVD-2025-102070
Malicious code in stickyhorsez3n npm...
EUVD-2025-102069
Malicious code in stickyscallopz3n npm...
EUVD-2025-77509
Malicious code in stickysquirrelchocolate-74 npm...
Malicious code in sticky_barnacle_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a0e4f6ea5fd14ac4d87e76bb37766d32f85f7881ea6119ddc99557cd69873d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...