MAL-2022-3123 Malicious code in fqtukaxmoibscnjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 143853fb0709124cde55af04acd8073ed9698977d4fc0e92bb770831945e7195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3535 Malicious code in gvskwiczjxplfkqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8e374831c665349ef2e1cf1a20716e065de740200e1dbf10deaae4863e388d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3622 Malicious code in hgxfbutkqovdzwpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8818876577210b7c544a05f724326352c60a53c43783177ef1ed6ebfaee3ada9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3682 Malicious code in hqbgkkmrztyijnou (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0cfddbdfcca5c142005c2e783353703c85b9da078bb545c976d8be01a3a659f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3719 Malicious code in hucodaimxvtrkeyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62d1014508bb1bdb98dafe5dc8ed085e505dd462bc6d637118b9b1ea13a8fa19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5539 Malicious code in qdobjtihkplyzuwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35a71fd04a4d31b6b4e750d1da34061425ff8ab70c023b9cbc40bfd4f2befbeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5777 Malicious code in rexivynfjbdlpakm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4aea129e4deca7c892be92bcd8e480d259df7f78833630d25bacb85180cd17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5857 Malicious code in rskovkpznxiydjmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac372d239c9910a1b0274333ed2505564a4b00fc2e11166999d2bff72caacafd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6459 Malicious code in teqarbfmpuvcnkkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67978625508e684cf3cee826c047b44c3e24b99eaadfc1a90ed307829588fe36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6931 Malicious code in vikcbhnystduflja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404337c5a4e76bce32c5cade442acaecf65a88e30bb12854a9aaf7df34833ad4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6950 Malicious code in vkchtoewspkjrfld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9714a5dfba8b824c7635de9bfed3a9d446315111e7d60dc0355c94a09ea3e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7242 Malicious code in wtbgzojhaiyermqk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ab2e9ef37efffa59d9c26f0aefc28d7e1b5b9e6cc82e000479fe25cad430dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7263 Malicious code in xbsrnfhgmvzuowpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cb8ee6ff48155453883046588c72742aa5d22c2dd1a8382fcd2329dff36308d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1952

The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An...

CVE-2022-1952

The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An...

CVE-2022-1951

The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputting them back in a response of an AJAX action, available to both unauthenticated and authenticated users when a premium theme from the vendor is active, leading to a Reflected...

CVE-2022-1057

The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

Cross site scripting

The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputting them back in a response of an AJAX action, available to both unauthenticated and authenticated users when a premium theme from the vendor is active, leading to a Reflected...

Sql injection

The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

CVE-2022-1952 eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload

The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An...