EUVD-2025-26972

Malicious code in bioql PyPI...

CVE-2025-58806

Cross-Site Request Forgery CSRF vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects WordPress Error Monitoring by Bugsnag: from n/a through = 1.6.3...

CVE-2025-58806 WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects WordPress Error Monitoring by Bugsnag: from n/a through = 1.6.3...

CVE-2025-58806

CVE-2025-58806 affects the WordPress plugin “BugSnag Error Monitoring” (WordPress Error Monitoring by Bugsnag). The vulnerability is a CSRF that also enables stored XSS, affecting versions up to and including 1.6.3 (from n/a through 1.6.3). The CVSS base vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C...

CVE-2025-58806 WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects WordPress Error Monitoring by Bugsnag: from n/a through = 1.6.3...

WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WordPress Error Monitoring by Bugsnag versions = 1.6.3...

Malicious code in bugsnag-plugin-react (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5805 Malicious code in bugsnag-plugin-react (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @harrysforge/gatsby-plugin-bugsnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50cfb74b7280a6b4678523b7822c12d047a189fad85f0961cf1c2c943708d360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...