1407 matches found
CVE-2025-11820
The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...
CVE-2025-11820
CVE-2025-11820 concerns the Graphina – Elementor Charts and Graphs plugin for WordPress, affected up to version 3.1.8. The issue is a Stored Cross‑Site Scripting (XSS) vulnerability caused by insufficient input sanitization and output escaping on data attributes, enabling an authenticated attacke...
CVE-2025-11820 Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets
The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...
CVE-2025-11820 Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets
The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...
CVE-2025-11841
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
WordPress Greenshift plugin <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Chart Data Attributes vulnerability discovered by Webbernaut in WordPress Plugin Greenshift versions = 12.2.7...
CVE-2025-11841
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-11841
CVE-2025-11841 (Greenshift – animation and page builder blocks) affects Greenshift for WordPress up to and including version 12.2.7. The vulnerability is a stored XSS via Chart Data attributes caused by insufficient input sanitization and output escaping. It requires authenticated access at Contr...
CVE-2025-11841 Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
PT-2025-44914
Name of the Vulnerable Software and Affected Versions Greenshift – animation and page builder blocks versions up to and including 12.2.7 Description The Greenshift plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Chart Data attributes. Insufficient input sanitization...
CVE-2025-11841: Improper Neutralization of Input During Web Page Generation
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
Malicious Package
Overview radial-chart is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: conjur-cli, oras, dynamic-localpv-provisioner, ytt, litefs, php-fpmexporter, cosign, fluent-bit-plugin-loki, kwok, k6, pguser, mage, protoc-gen-go-grpc, wave, custom-pod-autoscaler-operator, cert-manager-cmctl, spicedb-operator, task, oauth2-proxy, controller-gen,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: rancher-loglevel, conjur-cli, jitsucom-bulker, secrets-store-csi-driver-provider-aws, cert-manager-webhook-pdns, age, vexctl, falco-exporter, protoc-gen-go, kube-rbac-proxy, gotestsum, dynamic-localpv-provisioner, kaf, oras, litefs, boring-registry, elvish,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: rancher-loglevel, conjur-cli, jitsucom-bulker, secrets-store-csi-driver-provider-aws, cert-manager-webhook-pdns, age, vexctl, falco-exporter, protoc-gen-go, kube-rbac-proxy, gotestsum, dynamic-localpv-provisioner, kaf, oras, litefs, boring-registry, elvish,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: rancher-loglevel, conjur-cli, jitsucom-bulker, secrets-store-csi-driver-provider-aws, cert-manager-webhook-pdns, age, vexctl, falco-exporter, protoc-gen-go, kube-rbac-proxy, gotestsum, dynamic-localpv-provisioner, kaf, oras, litefs, boring-registry, elvish,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: livekit-egress, yace-fips, hivemind, crossplane-function-auto-ready-fips, velero, sigstore-scaffolding, aws-signer-notation-plugin-fips, apm-server-fips, conftest, k8sgpt-operator, gke-gcloud-auth-plugin, neuvector-dbgen, pvc-autoresizer-fips, prometheus-adapter,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: livekit-egress, yace-fips, hivemind, crossplane-function-auto-ready-fips, velero, sigstore-scaffolding, aws-signer-notation-plugin-fips, apm-server-fips, conftest, pvc-autoresizer-fips, gke-gcloud-auth-plugin, neuvector-dbgen, prometheus-adapter, crossplane,...
Malicious code in radial-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b215178ce54b5e31d5c917df96511b7b52a43e5b5554a6967eab33ae9888aa54 The package radial-chart was found to contain malicious code. Source: ghsa-malware c4804c38b473d0e81fd8afd180f2becce5f6699de1dc16639a2be5c5f8d58678 A...
