PT-2025-33707 · WordPress · Media Library Assistant

Name of the Vulnerable Software and Affected Versions: Media Library Assistant plugin for WordPress versions up to and including 3.27 Description: The Media Library Assistant plugin for WordPress is susceptible to arbitrary file deletion within the /wp-content/uploads directory. This is due to...

Malicious code in andrii.bulat.ably (npm)

The package andrii.bulat.ably was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @zalastax/nolb-de2 (npm)

The package @zalastax/nolb-de2 was found to contain malicious code...

Malicious code in @npmshivamkalsi/et-eos-aperiam-suscipit (npm)

The package @npmshivamkalsi/et-eos-aperiam-suscipit was found to contain malicious code...

Malicious code in @lbnqduy/animated-octo-enigma (npm)

The package @lbnqduy/animated-octo-enigma was found to contain malicious code...

Malicious code in @erboladaiteas/officiis-ipsa-dicta (npm)

The package @erboladaiteas/officiis-ipsa-dicta was found to contain malicious code...

Malicious code in @npmshivamkalsi/dolores-laborum-ipsam-minima (npm)

The package @npmshivamkalsi/dolores-laborum-ipsam-minima was found to contain malicious code...

Malicious code in medium-author (npm)

The package medium-author was found to contain malicious code...

MAL-2025-11369 Malicious code in @zalastax/nolb-exp0 (npm)

The package @zalastax/nolb-exp0 was found to contain malicious code...

MAL-2025-8327 Malicious code in @lbnqduy/didactic-waffle (npm)

The package @lbnqduy/didactic-waffle was found to contain malicious code...

MAL-2025-8022 Malicious code in @hishprorg/dolorum-aut (npm)

The package @hishprorg/dolorum-aut was found to contain malicious code...

MAL-2025-8120 Malicious code in @juigorg/voluptates-aperiam (npm)

The package @juigorg/voluptates-aperiam was found to contain malicious code...

MAL-2025-9337 Malicious code in @sourceressj2001/doloribus-ea-nobis (npm)

The package @sourceressj2001/doloribus-ea-nobis was found to contain malicious code...

MAL-2025-26148 Malicious code in medium-author (npm)

The package medium-author was found to contain malicious code...

CVE-2025-6986

CVE-2025-6986 affects the WordPress plugin FileBird – WordPress Media Library Folders & File Manager (versions prior to 6.4.9). The vulnerability is an authenticated SQL Injection via the search parameter caused by insufficient escaping and poor SQL query preparation, allowing an attacker with Au...

CVE-2025-8401

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.1 via the 'getpostdata' function. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive...

CVE-2025-8151

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.9.1 via the 'saveblockcss' function. This makes it possible for authenticated attackers, with Author-level access and above, to create CSS files in any director...

CVE-2025-3075

The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'elementor-element' shortcode in all versions up to, and including, 3.29.0 due to insufficient input sanitization and output escaping on user supplied...

Adobe ColdFusion 2023.6 - Remote File Read

Exploit Title: Adobe ColdFusion 2023.6 - Remote File Read Exploit Author: @İbrahimsql Exploit Author's github: https://github.com/ibrahmsql Description: ColdFusion 2023 LUcee - Remote Code Execution CVE: CVE-2024-20767 Vendor Homepage: https://www.adobe.com/ Requirements: requests=2.25.0,...

CVE-2025-54075

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion / stored cross-site scripting vulnerability in @nuxtjs/mdc lets a Markdown author inject a element. The tag rewrites how all subsequent relative...