MAL-2025-16751 Malicious code in ch-react-dropdown (npm)

The package ch-react-dropdown was found to contain malicious code...

MAL-2025-9300 Malicious code in @sellerly-kit/dropdown (npm)

The package @sellerly-kit/dropdown was found to contain malicious code...

MAL-2025-9301 Malicious code in @sellerly-kit/dropdown-bottom-sheet (npm)

The package @sellerly-kit/dropdown-bottom-sheet was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-11692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks. This vulnerability...

Malicious code in @toptal/picasso-dropdown (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6045 Malicious code in @toptal/picasso-dropdown (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in action_dropdown (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa59d258b8e3e32c53b3c209203176ea50eabf29b16767fe69cb055147503799 Any computer that has this package installed or running should be considered...

Malicious code in dropdown_styles.css (npm)

The package communicates with a domain associated with malicious activity...

CVE-2024-29910

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alordiel Dropdown Multisite selector allows Stored XSS.This issue affects Dropdown Multisite selector: from n/a through 0.9.2...

CVE-2024-3520

The Country State City Dropdown CF7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tccscapatchsettings function in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with subscriber access...

CVE-2023-5110

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' shortcode in versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2021-25113

The Dropdown Menu Widget WordPress plugin through 1.9.7 does not have authorisation and CSRF checks when saving its settings, allowing low privilege users such as subscriber to update them. Due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues...

CVE-2013-2704

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

CVE-2019-10085

In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page...

CVE-2025-47451

Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Product Quantity Dropdown For Woocommerce product-quantity-dropdown-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Quantity Dropdown For Woocommerce: from n/a through = 1.2...

CVE-2025-47451

Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Product Quantity Dropdown For Woocommerce product-quantity-dropdown-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Quantity Dropdown For Woocommerce: from n/a through = 1.2...

WordPress plugin Product Quantity Dropdown For Woocommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin Product Quanti...

PT-2025-20087 · WordPress · Product Quantity Dropdown For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Quantity Dropdown For Woocommerce versions 1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions 1.2 and earlier, update to a...

CVE-2025-46478

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in metaloha Dropdown Content dropdown-content allows Stored XSS.This issue affects Dropdown Content: from n/a through = 1.0.2...

WordPress Dropdown Content plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Dropdown Content versions = 1.0.2...