EUVD-2025-88799

Malicious code in sinta-rojak93-miaww npm...

EUVD-2025-91014

Malicious code in irma-lumpur24-miaww npm...

CGA-R274-H522-38P3

Bulletin has no description...

XPath Injection

smolagents is vulnerable to XPath injection. The vulnerability is due to insecure XPath construction due to searchitemctrlf concatenating unsanitized user input into XPath expressions, allowing attackers to inject XPath to bypass filters, access unintended DOM nodes, or disrupt web automation...

EUVD-2025-74226

Malicious code in softcicadaharlequin-99 npm...

EUVD-2025-75505

Malicious code in superaardwolf-appteadev npm...

EUVD-2025-77532

Malicious code in radicalmockingbirdorange-71 npm...

EUVD-2025-77540

Malicious code in progressivelungfishturquoise-24 npm...

EUVD-2025-83244

Malicious code in yuni-kue56-ruro npm...

EUVD-2025-71130

Malicious code in cici-martabak37-ruro npm...

EUVD-2025-70435

Malicious code in fauzi-nasi81-ruro npm...

EUVD-2025-60957

The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.9. This is due to the plugin exposing sensitive Algolia API keys through the frontend JavaScript code via wplocalizescript without prope...

EUVD-2025-72238

Malicious code in lina-kemplang23-tititugel npm...

EUVD-2025-86120

Malicious code in fajar-gaplek96-miaww npm...

CVE-2025-11997 Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure

The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.9. This is due to the plugin exposing sensitive Algolia API keys through the frontend JavaScript code via wplocalizescript without prope...

CVE-2025-11997 Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure

The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.9. This is due to the plugin exposing sensitive Algolia API keys through the frontend JavaScript code via wplocalizescript without prope...

CVE-2025-11997

CVE-2025-11997 affects the WordPress plugin Document Pro Elementor – Documentation & Knowledge Base. The root cause is information exposure via frontend JS: Algolia API keys are exposed through wp_localize_script without proper access controls, enabling unauthenticated users to view keys in page ...

EUVD-2025-57688

Malicious code in putri-wajit84-sluey npm...

PT-2025-46353

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Firefox ESR versions prior to 140.5 Firefox ESR versions prior to 115.30 Description A mitigation bypass exists in the DOM: Core & HTML component. This issue could allow for bypassing security mitigations...

WordPress plugin Document Pro Elementor 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Document Pro Elementor has an information disclosure vulnerability, the...