buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.9.27)

yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

aishell (>=2023.3.3, <=2023.4.11), anicli-api (>=0.3.0, <=0.3.8) +45 more potentially affected by CVE-2026-50574 via yt-dlp (2023.12.30)

yt-dlp PYPI version 2023.12.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - aishell =2023.3.3, =0.3.0, =1.4.0, =0.1.0, =1.0.2, =2.0.0a1, =2.3.10, =0.2.0, =0.4.1, =0.1.4, =0.0.1, =0.1.0, =0.1.1, =1.2.1 and more Source...

buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2024-38519 +1 more via yt-dlp (2024.9.27)

yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2024-38519, CVE-2026-50023 Source advisory: OSV:PYSEC-2026-34...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2024-38519 +1 more via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2024-38519, CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, according to new findings from Check Point Research. The threat actor also has at their disposal a dedicated WordPress phishing page that acts as the central hu...

aishell (>=2023.3.3, <=2023.4.11), anicli-api (>=0.3.0, <=0.3.8) +45 more potentially affected by CVE-2026-50574 via yt-dlp (2023.12.30)

yt-dlp PYPI version 2023.12.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - aishell =2023.3.3, =0.3.0, =1.4.0, =0.1.0, =1.0.2, =2.0.0a1, =2.3.10, =0.2.0, =0.4.1, =0.1.4, =0.0.1, =0.1.0, =0.1.1, =1.2.1 and more Source...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.9.27)

yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2024.9.27)

yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

CVE-2026-6041

The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' buzzcommentsavatarimage setting in all versions up to, and including, 0.9.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

axolotl (0.5.0), buzz-captions (1.2.0) +11 more potentially affected by CVE-2026-5241 via transformers (4.46.1)

transformers PYPI version 4.46.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - axolotl 0.5.0 - buzz-captions 1.2.0 - fastvideo =0.0.1.dev0, =2.0.21, =0.1.1, =0.4.6, =0.1.0, =0.0.3.post1, =0.0.4 - xcodec2-infer-lib...

buzz-captions (1.1.0), hyfi-ml (0.2.0) +4 more potentially affected by CVE-2026-4372 via transformers (4.39.1)

transformers PYPI version 4.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - buzz-captions 1.1.0 - hyfi-ml 0.2.0 - integral-deid =0.1.0, =4.0.0rc6, =0.0.1, =2.2.8, =2.4.5 Source cves: CVE-2026-4372 Source advisor...

EUVD-2026-24698

The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' buzzcommentsavatarimage setting in all versions up to, and including, 0.9.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-6041

The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' buzzcommentsavatarimage setting in all versions up to, and including, 0.9.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-6041

Vulnerability overview: CVE-2026-6041 affects the WordPress plugin Buzz Comments (versions up to 0.9.4). The issue is a Stored Cross-Site Scripting (Stored XSS) via the Custom Buzz Avatar setting (buzz_comments_avatar_image) caused by insufficient input sanitization and output escaping. Impact an...

CVE-2026-6041 Buzz Comments <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Buzz Avatar' Setting

The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' buzzcommentsavatarimage setting in all versions up to, and including, 0.9.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-6041 Buzz Comments <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Buzz Avatar' Setting

The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' buzzcommentsavatarimage setting in all versions up to, and including, 0.9.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-6041

The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' buzzcommentsavatarimage setting in all versions up to, and including, 0.9.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticate...