2197 matches found
CVE-2025-68557 WordPress Chakra test plugin <= 1.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chakra test: from n/a through = 1.0.1...
CVE-2025-68557 WordPress Chakra test plugin <= 1.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chakra test: from n/a through = 1.0.1...
CVE-2025-68557
Summary (CVE-2025-68557): A missing authorization vulnerability exists in the WordPress Chakra test plugin up to version 1.0.1, caused by misconfigured access control security levels. This affects Chakra test plugins for WordPress (WordPress plugin product line) and could allow unauthorized acces...
WordPress Chakra test plugin <= 1.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Jitlada in WordPress Plugin Chakra test versions = 1.0.1...
WordPress plugin Chakra test 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A lack of authorization vulnerability exists in the WordPress Chakra test plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access contr...
PT-2025-52740
Name of the Vulnerable Software and Affected Versions Chakra test versions through 1.0.1 Description A missing authorization issue exists in Chakra test, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Chakra test to a version newer than 1.0....
IE Mode: A Window to the Web – or to Attackers?
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Recently, Internet Explorer IE Mode has been weaponized by threat actors through multiple zero-day...
EUVD-2025-179790
Malicious code in chakra-ui-standard-nuxtjs-sass-loader npm...
EUVD-2025-179789
Malicious code in chakra-ui-test-quark-astrophysics npm...
EUVD-2025-179795
Malicious code in chakra-ui-fomalhaut-on-cosmochemistry npm...
EUVD-2025-177530
Malicious code in nova-chakra-ui-css-loader-eris npm...
Malicious code in chakra-ui-sadr-yaml-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179791
Malicious code in chakra-ui-sadr-yaml-less-loader npm...
EUVD-2025-176287
Malicious code in solis-chakra-ui-comet-lint npm...
EUVD-2025-177324
Malicious code in parcel-non-blocking-bulma-chakra-ui npm...
Malicious code in parallax-chakra-ui-mantle-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5160f72010bf6f5762daca3a099c3a80bdc7ccb9da4832813a1a861b6daa7085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186087 Malicious code in chakra-ui-fomalhaut-on-cosmochemistry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626310491e4df1062e97b696358239f834cf757c5dfba5eeebcdb0c80a0067fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186091 Malicious code in chakra-ui-sadr-yaml-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nodejs-cosmicweb-chakra-ui-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a5092226cfdaec9107ff680820108c965f38859cd60ac2915fa0552cf83dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...