PT-2025-47768

Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.5.5...

WordPress plugin Featured Post Creative 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-66106: Missing Authorization

Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.5.5...

EUVD-2025-100206

Malicious code in creativeplatypusz3n npm...

EUVD-2025-79506

Malicious code in creativeravenz3n npm...

EUVD-2025-82343

Malicious code in creativeplatypus0xrequest npm...

EUVD-2025-70966

Malicious code in creativeleechz3n npm...

EUVD-2025-64713

Malicious code in creativesilkwormz3n npm...

EUVD-2025-64712

Malicious code in creativestarfishz3n npm...

EUVD-2025-86660

Malicious code in creativelemmingz3n npm...

Malicious code in creative_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264016d3513c51418f1528350536d4eef884211a55c7202407cccb222bbc5cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55120

Malicious code in creative-aqua-crayfish npm...

EUVD-2025-55119

Malicious code in creative-aqua-earwig npm...

EUVD-2025-55118

Malicious code in creative-black-lobster npm...

EUVD-2025-55117

Malicious code in creative-gray-mackerel npm...

EUVD-2025-48242

Malicious code in creativehamsterz3n npm...

Malware Injection

prebid-universal-creative is vulnerable to malware injection. The vulnerability is due to the inclusion of crypto-related malicious code and the latest release, which allows an attacker to execute unauthorized cryptocurrency-related operations on affected systems...

Malicious code in peloton-creative-assets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 27599b248968e9e2ea7e7167ee3199163e611123d5a34c382d7041a04ade757e The OpenSSF Package Analysis project identified...

MAL-2025-48752 Malicious code in peloton-creative-assets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 27599b248968e9e2ea7e7167ee3199163e611123d5a34c382d7041a04ade757e The OpenSSF Package Analysis project identified...

Unspecified Vulnerability in Adobe Creative Cloud Desktop

Adobe Creative Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Member Management Center from the American company Audobee Adobe. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...