CVE-2025-60071

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in don-themes Riode riode allows PHP Local File Inclusion.This issue affects Riode: from n/a through = 1.6.23...

CVE-2025-60071

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in don-themes Riode riode allows PHP Local File Inclusion.This issue affects Riode: from n/a through = 1.6.23...

Malicious code in mitailok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b49d2d4ec53d95b26d764997a3dfb84b07b5153d85411761052d60cb0572281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f3e15f446cfae9859dbc6ffaf9f12e9670e46363a1eb87bb7ba49ed195232c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobsina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebd5d145b696dadf2cc3c8754e55d90edbefdc7a34c35514e4bc5c7978c960f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitalik-don-olikaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fffb32881e3931e30af06b89e51baf70cfcfaea935f228f8a235f888c2cf4405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada56ddd17ee180057940187ed6c716e7754ab7100f4893a658803556b1f1c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a3675b69a680425c03ae8b025d42c23d87ceba2f9956dadb332a26b56adcbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-3332

Malicious code in bioql PyPI...

EUVD-2022-49932

Malicious code in bioql PyPI...

EUVD-2022-48274

Malicious code in bioql PyPI...

CVE-2022-47157

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Don Benjamin WP Custom Fields Search plugin = 1.2.34 versions...

CVE-2022-45364

Cross-Site Request Forgery CSRF vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload – Contact Form 7 plugin = 1.3.6.5 versions...

CVE-2022-45377

Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8...

MAL-2025-1498 Malicious code in simulateur-de-don (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85261d939101bd6262ac504db7d7c42ee93a444ba9a1ae423a8ba1eab7d56bca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simulateur-de-don (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85261d939101bd6262ac504db7d7c42ee93a444ba9a1ae423a8ba1eab7d56bca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-23673

CVE-2025-23673: CSRF in Email on Publish (WordPress plugin) can trigger Stored XSS in versions from n/a through 1.5. Root cause is CSRF enabling XSS payload execution; CVSS 3.1 base 7.1. No additional remediation details provided in the documents.

PT-2025-5011

Name of the Vulnerable Software and Affected Versions Don Kukral Email on Publish versions n/a through 1.5 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a we...

don-gun.ru Cross Site Scripting vulnerability OBB-3905576

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-45377

Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8...