WordPress plugin CSV to SortTable has a cross-site scripting vulnerability

WordPress CSV to SortTable plugin is WordPress plugin for converting CSV files to interactive sorting tables. The WordPress CSV to SortTable plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data,...

CVE-2025-13133: Improper Neutralization of Formula Elements in a CSV File

The Simple User Import Export plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.1.7 via the 'Import/export users' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to embed untrusted input into export...

WordPress Simple User Import Export plugin <= 1.1.7 - Authenticated (Admin+) CSV Injection vulnerability

Authenticated Admin+ CSV Injection vulnerability discovered by Ivan Cese in WordPress Plugin Simple User Import Export versions = 1.1.7...

EUVD-2025-175675

Malicious code in vuetify-thermochronology-csv-cryovolcano npm...

EUVD-2025-179450

Malicious code in csv-mongodb-rehype-less-loader npm...

Malicious code in csv-mongodb-rehype-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f821738c4cf7c99d8107896b24f9a81bd00506c105a6aca07ef8a729d5d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176074

Malicious code in tachyon-vortex-bellatrix-csv npm...

EUVD-2025-176557

Malicious code in sagitta-protractor-taurus-csv npm...

EUVD-2025-178169

Malicious code in kuiperbelt-taurus-csv-ceres npm...

EUVD-2025-179453

Malicious code in csv-envconfig-achernar-stratigraphy npm...

EUVD-2025-177899

Malicious code in mensa-subscription-antares-csv npm...

EUVD-2025-179448

Malicious code in csv-steganography-sadr-buffer npm...

EUVD-2025-176269

Malicious code in spectron-csv-dynamo-bunyan npm...

Malicious code in csv-helmet-dione-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13660b1e5cd8242126ed9b1d8d9e9fd3a9430c6c23281cb67541a8d90eb0873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-puppeteer-phoenix-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374bf3eeca6aa7f97f05cedd4268ceca21f16e8c36c450cb4fa2c17ac2ffd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179455

Malicious code in csv-aldebaran-biohacking-cluster npm...

EUVD-2025-179449

Malicious code in csv-puppeteer-phoenix-event npm...

Malicious code in kuiperbelt-taurus-csv-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8993b5329a7604ba0c4c94d86538798b1f58cc2d7e21fb16f89b966ebf27387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179454

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin npm...

MAL-2025-189248 Malicious code in rimraf-quantum-csv-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9909070a68830c6d663c79812a272f46e552253bfb360b94ab3ec3234e687778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...