EUVD-2025-180101

Malicious code in beta-grep-cron-omega-validate npm...

EUVD-2025-177477

Malicious code in old-export-class-cron-deploy npm...

EUVD-2025-178656

Malicious code in grep-cron-thread-grep-short npm...

EUVD-2025-175664

Malicious code in warn-class-proxy-cron-earth npm...

EUVD-2025-179214

Malicious code in easy-cron-secure-thread-sanitize npm...

EUVD-2025-179206

Malicious code in easy-throw-cron-rho-sanitize npm...

EUVD-2025-176537

Malicious code in sandbox-hot-cron-query-boolean npm...

EUVD-2025-180174

Malicious code in awk-node-public-interpret-cron npm...

EUVD-2025-179246

Malicious code in double-uglify-long-static-cron npm...

EUVD-2025-179506

Malicious code in cron-tree-query-unix-report npm...

EUVD-2025-175895

Malicious code in transpile-pi-cron-secure-double npm...

EUVD-2025-180080

Malicious code in big-grid-cron-parse-fork npm...

EUVD-2025-179507

Malicious code in cron-rho-analyze-socket-air npm...

EUVD-2025-178195

Malicious code in key-tree-cron-serialize-process npm...

EUVD-2025-179509

Malicious code in cron-kappa-bash-serialize-beta npm...

EUVD-2025-179748

Malicious code in chi-cron-sudo-finally-visualize npm...

CVE-2025-12177

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...

EUVD-2025-38361

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...

CVE-2025-12177

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...

CVE-2025-12177 Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...