MAL-2025-43944 Malicious code in date-banana-mango-wwutn (npm)

The package date-banana-mango-wwutn was found to contain malicious code...

MAL-2025-43180 Malicious code in @zalastax/nolb-date- (npm)

The package @zalastax/nolb-date- was found to contain malicious code...

MAL-2025-43948 Malicious code in date-uniform-fig-idgvt (npm)

The package date-uniform-fig-idgvt was found to contain malicious code...

MAL-2025-44693 Malicious code in india-date-watermelon-aeufe (npm)

The package india-date-watermelon-aeufe was found to contain malicious code...

MAL-2025-45284 Malicious code in nectarine-date-whiskey-ytalo (npm)

The package nectarine-date-whiskey-ytalo was found to contain malicious code...

MAL-2025-43658 Malicious code in bravo-kiwi-date-yysap (npm)

The package bravo-kiwi-date-yysap was found to contain malicious code...

MAL-2025-44827 Malicious code in juliet-date-foxtrot-wuflb (npm)

The package juliet-date-foxtrot-wuflb was found to contain malicious code...

Malicious code in date-papa-raspberry-wpsqi (npm)

The package date-papa-raspberry-wpsqi was found to contain malicious code...

Malicious code in date-banana-mango-wwutn (npm)

The package date-banana-mango-wwutn was found to contain malicious code...

MAL-2025-45488 Malicious code in oscar-hotel-date-gwstk (npm)

The package oscar-hotel-date-gwstk was found to contain malicious code...

MAL-2025-43946 Malicious code in date-nectarine-grape-jprgq (npm)

The package date-nectarine-grape-jprgq was found to contain malicious code...

MAL-2025-43945 Malicious code in date-lemon-xigua-ktasf (npm)

The package date-lemon-xigua-ktasf was found to contain malicious code...

MAL-2025-44983 Malicious code in lemon-apple-date-pffoh (npm)

The package lemon-apple-date-pffoh was found to contain malicious code...

CVE-2025-48103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

CVE-2025-48103 WordPress Today's Date Inserter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

CVE-2025-48103

CVE-2025-48103 is a stored XSS in the WordPress plugin Today's Date Inserter (versions

CVE-2025-48103 WordPress Today's Date Inserter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

CVE-2025-48527

creationtimestamp| type| source ---|---|--- 2025-09-05 15:30:36+00:00| seen| Telegram/1pSNxAD1IPHPWpQfMaLZ4rtENfI88Q4x88DxKlNgM2ubNG0...

CVE-2025-58599

Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through = 4.1.0...

CVE-2025-58446

creationtimestamp| type| source ---|---|--- 2025-09-05 01:30:23+00:00| published-proof-of-concept| https://github.com/mlc-ai/xgrammar/security/advisories/GHSA-9q5r-wfvf-rr7f 2025-09-06 21:45:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly75kleaqi2r...