7129 matches found
CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...
CVE-2025-12732
CVE-2025-12732 impacts the WordPress plugin “WP Import – Ultimate CSV XML Importer for WordPress” (versions
WordPress WP Import plugin <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure vulnerability
Missing Authorization to Authenticated Author+ Sensitive Information Exposure vulnerability discovered by M Indra Purnama type5afe in WordPress Plugin WP Ultimate CSV Importer versions = 7.33...
EUVD-2025-111525
Malicious code in lynx-csv-bunyan-repository npm...
EUVD-2025-111514
Malicious code in lynx-yildun-csv-xenon npm...
EUVD-2025-111507
Malicious code in lyra-grus-csv-dotenv-parse-variables npm...
EUVD-2025-111211
Malicious code in meteor-config-csv-yakutsk npm...
EUVD-2025-111965
Malicious code in kaus-local-readable-csv npm...
Malicious code in csv-nova-eridanus-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf3de98dfec792077b0333e20a8ce8bf28b2841ac4e64efc61058dbde691c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in csv-ultra-wezen-astro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1858d3c966b6f580575064487e3a89444dbbd196a7324183c8b834a2b42ec59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geckodriver-magellan-csv-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcb5295e48d36097f3e9d17b0d1580795374421d507e8f84f0bc5acb818b7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tethys-mira-csv-impulse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113240
Malicious code in geckodriver-magellan-csv-duplex npm...
EUVD-2025-113178
Malicious code in global-fomalhaut-protractor-csv npm...
EUVD-2025-113155
Malicious code in google-csv-bellatrix-chariklo npm...
EUVD-2025-112931
Malicious code in hapi-csv-zenobia-xanadu npm...
EUVD-2025-113895
Malicious code in eslint-csv-galaxy-protractor npm...
EUVD-2025-113605
Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...