PT-2026-1976

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters, such as tabs, as separators...

WordPress Show Variations as Single Products Woocommerce plugin <= 2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Show Variations as Single Products Woocommerce versions = 2.0...

CVE-2025-66114

Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...

EUVD-2025-198440

Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...

CVE-2025-66114

Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...

CVE-2025-66114

CVE-2025-66114 refers to a Missing Authorization / Broken Access Control in the WordPress plugin Show Variations as Single Products Woocommerce (plugin &lt;= 2.0). The vulnerability enables access control bypass for variations data; exploitation details, affected versions (

CVE-2025-66114 WordPress Show Variations as Single Products Woocommerce plugin <= 2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...

CVE-2025-66114 WordPress Show Variations as Single Products Woocommerce plugin <= 2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...

WordPress plugin Show Variations as Single Products Woocommerce 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that provides the ability to set up a personal blog site on a PHP and MySQL based server. WordPress plugin Show Variations as Single Products A...

PT-2025-47776

Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...

Malicious code in zeta-lambda-abstract-eta-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b820d228c75228585ef00e24bee4183f5a0dff3ec86ddc4b9cc4727395b97ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187386 Malicious code in hugo-nashira-boson-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728679d568943b8e701a38466dcaf011a95064ea258b5e16ed806bdee8ef90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sat-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4a84882abdddf9fcdc30ed3a16b45eae18397664dd5a4eae53b3a68e703bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahmarnaeem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54fa352e0e2feaa230d697ef4661bf59997e93204fcee133c8e44a161c94abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulipo-lukafahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701d3b8859efc71850bed601a0861495a7c3cc6d89fdc22a923aaad821dff6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-loglevel-meissa-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909e4c33893b2a01e7ce57de10e579ce8302c27633a661dfbed926ef6435f9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-bellatrix-flare-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e8fb78cbfe2b9703119843bcf9dc9fed3a416b3af62cc1f848ee7ed6c007a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12078ba8dc186595574f7a82c307313dc1c23a229eda548bd4a1b9b1b297e29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120572 Malicious code in hendra-getuk3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1679d2bb602abbf3785e9e1b55b29fc5e244447bd2d20667b5ed9da33cd01c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94068 Malicious code in distinguished_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae8563afd9027c37850ec7ae07e5d7019a58dedb3fd306e60f62dfbe360557a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...