Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)

The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...

Malicious code in element-ui-xenon-uranology-bunyan (npm)

The package element-ui-xenon-uranology-bunyan was found to contain malicious code...

MAL-2025-43428 Malicious code in aldebaran-sirius-umbriel-element-ui (npm)

The package aldebaran-sirius-umbriel-element-ui was found to contain malicious code...

MAL-2025-46749 Malicious code in yakutsk-airbnb-webpack-element-ui (npm)

The package yakutsk-airbnb-webpack-element-ui was found to contain malicious code...

MAL-2025-46790 Malicious code in yildun-element-ui-phoebe-protractor (npm)

The package yildun-element-ui-phoebe-protractor was found to contain malicious code...

MAL-2025-45945 Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)

The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...

MAL-2025-44127 Malicious code in element-ui-cryptography-gravity-quito (npm)

The package element-ui-cryptography-gravity-quito was found to contain malicious code...

MAL-2025-44129 Malicious code in element-ui-xenon-uranology-bunyan (npm)

The package element-ui-xenon-uranology-bunyan was found to contain malicious code...

MAL-2025-44702 Malicious code in install-eleventy-cluster-element-ui (npm)

The package install-eleventy-cluster-element-ui was found to contain malicious code...

MAL-2025-44128 Malicious code in element-ui-public-publish-sync (npm)

The package element-ui-public-publish-sync was found to contain malicious code...

CVE-2025-58796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dudaster Elementor Element Condition ele-conditions allows Stored XSS.This issue affects Elementor Element Condition: from n/a through = 1.0.5...

CVE-2025-58796 WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dudaster Elementor Element Condition ele-conditions allows Stored XSS.This issue affects Elementor Element Condition: from n/a through = 1.0.5...

CVE-2025-58796 WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dudaster Elementor Element Condition ele-conditions allows Stored XSS.This issue affects Elementor Element Condition: from n/a through = 1.0.5...

CVE-2025-58796

CVE-2025-58796 is a stored XSS in the WordPress plugin “Elementor Element Condition” (dudaster) affecting versions up to 1.0.5. The issue arises from improper input neutralization during web page generation, enabling script injection via crafted input. Public disclosures in multiple sources (incl...

WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Que Thanh Tuan Blue Rock in WordPress Plugin Elementor Element Condition versions = 1.0.5...

GHSA-PH2W-CX28-VHRQ TkEasyGUI Affected by Uncontrolled Search Path Element Issue

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

Uncontrolled Search Path Element

Overview TkEasyGUI is a TkEasyGUI is simple GUI Library for Python3 with Tkinter Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the search path element. An attacker can execute arbitrary code with the privileges of the running program by placing a malicio...

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

PT-2025-36136

Name of the Vulnerable Software and Affected Versions: dudaster Elementor Element Condition versions through 1.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations:...

WordPress plugin Elementor Element Condition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...