Malicious code in googlesitekit-widgets (npm)

The package googlesitekit-widgets was found to contain malicious code...

Malicious code in anan-d-widgets (npm)

The package anan-d-widgets was found to contain malicious code...

MAL-2025-30752 Malicious code in prosoft-crm-widgets (npm)

The package prosoft-crm-widgets was found to contain malicious code...

MAL-2025-9230 Malicious code in @paysol-widgets/client (npm)

The package @paysol-widgets/client was found to contain malicious code...

MAL-2025-22064 Malicious code in guru-react-native-widgets (npm)

The package guru-react-native-widgets was found to contain malicious code...

MAL-2025-14477 Malicious code in anan-d-widgets (npm)

The package anan-d-widgets was found to contain malicious code...

MAL-2025-9229 Malicious code in @paysol-widgets/api-client (npm)

The package @paysol-widgets/api-client was found to contain malicious code...

MAL-2025-9231 Malicious code in @paysol-widgets/ts-client (npm)

The package @paysol-widgets/ts-client was found to contain malicious code...

MAL-2025-32801 Malicious code in scm-ui-widgets (npm)

The package scm-ui-widgets was found to contain malicious code...

MAL-2025-21733 Malicious code in googlesitekit-widgets (npm)

The package googlesitekit-widgets was found to contain malicious code...

MAL-2025-15555 Malicious code in beam-widgets (npm)

The package beam-widgets was found to contain malicious code...

MAL-2025-33794 Malicious code in sportstream-widgets (npm)

The package sportstream-widgets was found to contain malicious code...

MAL-2025-34246 Malicious code in sutter-health-widgets (npm)

The package sutter-health-widgets was found to contain malicious code...

MAL-2025-34248 Malicious code in sutterhealth-ui-toolkit-widgets (npm)

The package sutterhealth-ui-toolkit-widgets was found to contain malicious code...

CVE-2025-8874

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.0.8.6 due to insufficient input sanitization and output...

CVE-2025-8874 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.0.8.6 due to insufficient input sanitization and output...

CVE-2025-6253

The CVE-2025-6253 entry concerns the WordPress plugin UiCore Elements (Free Elementor widgets/templates) with versions up to and including 1.3.0. The vulnerability is an Arbitrary File Read caused by a missing capability check and insufficient controls on the filename in the prepare_template() fu...

CVE-2025-6253 UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read

The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.3.0 via the preparetemplate function due to a missing capability check and insufficient controls on the filename specified. This makes it...

PT-2025-32628 · WordPress · Uicore Elements

Name of the Vulnerable Software and Affected Versions: UiCore Elements – Free Elementor widgets and templates for WordPress versions up to and including 1.3.0 Description: The plugin is susceptible to arbitrary file reading via the prepare template function. This is due to a missing capability...

CLSA-2025-1754648405 Fix CVE(s): CVE-2025-27613, CVE-2025-27614, CVE-2025-46835

SECURITY UPDATE: potential file creation/truncation when cloning untrusted repository in gitk - debian/patches/CVE-2025-27613CVE-2025-27614CVE-2025-46835.patch: improve dark mode support, remove hard-coded colors in ttext calls and use colors from the theme for text widgets via Text.Background an...