EUVD-2025-89760

Malicious code in objectivetakinz3n npm...

EUVD-2025-88402

Malicious code in tomi-kupang31-miaww npm...

EUVD-2025-76575

Malicious code in incrediblecaribou-smiletea npm...

EUVD-2025-79526

Malicious code in convincingmastodonz3n npm...

EUVD-2025-78738

Malicious code in neartarantulaz3n npm...

EUVD-2025-63014

Malicious code in moralwoodpeckerz3n npm...

EUVD-2025-84726

Malicious code in ministerialmoosez3n npm...

EUVD-2025-86061

Malicious code in fauzi-telurtahu6-miaww npm...

EUVD-2025-53081

Malicious code in naval-lime-lemming npm...

EUVD-2025-49311

Malicious code in statutoryclownfishz3n npm...

EUVD-2025-50578

Malicious code in chronicangelfishz3n npm...

EUVD-2025-44259

Malicious code in yuni-liwet34-sukiwir npm...

EUVD-2025-44278

Malicious code in yuni-empal28-sukiwir npm...

EUVD-2025-46404

Malicious code in maya-klipo65-sukiwir npm...

EUVD-2025-41175

Malicious code in eko-dradag77-breki npm...

EUVD-2025-38161

IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 27, 2025 to November 2, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 pe...

EUVD-2025-37804

Not used...

EUVD-2025-37799

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

EUVD-2025-37578

The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to modify plugin's settings via a forged reques...