1405 matches found
CVE-2025-67543: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Essential Widgets essential-widgets allows Stored XSS.This issue affects Essential Widgets: from n/a through = 2.2.2...
CVE-2022-46845: Missing Authorization
Missing Authorization vulnerability in Essential Plugin Slider a SlidersPack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider a SlidersPack: from n/a before 2.3...
WordPress plugin Essential Widgets 安全漏洞
WordPress Essential Widgets plugin is a tool used to enhance the functionality of your website, mainly providing the ability to create and add highly customizable widgets Widgets to help users manage the layout of their website content more flexibly. A cross-site scripting vulnerability exists in...
CVE-2025-67470: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio and Projects portfolio-and-projects allows Retrieve Embedded Sensitive Data.This issue affects Portfolio and Projects: from n/a through = 1.5.5...
PT-2025-49919
Name of the Vulnerable Software and Affected Versions Catch Themes Essential Widgets versions through 2.2.2 Description A flaw exists in Catch Themes Essential Widgets that allows for Stored Cross-site Scripting XSS. This issue occurs due to improper neutralization of input during web page...
Security Bulletin: Due to use of quartz-jobs, IBM Sterling Partner Engagement Manager is vulnerable to a code injection.
Summary IBM Sterling Partner Engagement Managaer uses quartz-jobs, within the product CVE-2025-4447. Vulnerability Details CVEID:CVE-2023-39017 DESCRIPTION: quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component...
WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mdr in WordPress Plugin Essential Widgets versions = 2.2.2...
CVE-2025-66106
Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.5.5...
EUVD-2025-198448
Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.5.5...
CVE-2025-66106
Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.5.5...
PT-2025-47768
Name of the Vulnerable Software and Affected Versions Essential Plugin Featured Post Creative versions through 1.5.5 Description The Essential Plugin Featured Post Creative component contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorize...
CVE-2025-66106: Missing Authorization
Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.5.5...
WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bonds in WordPress Plugin Essential Addons for Elementor versions = 6.5.5...
Malicious code in essential_shark_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386390d5513fb827f59c669c718ed3172a88a87402ed0986115090f995a2771d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in essential_bobolink_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be1c3e9d410fb127fdbf39d47a428a1a1763c5f42472ffe9e492fbad7f61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in essential_rooster_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79872b4142041a07dc92b8ad29c952520907301acbd1a6d770906efad0c78c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-99124
Malicious code in essentialvicunaz3n npm...
Malicious code in essential_marten_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e8c33ce1ba492052cd207f1146641601ba87aa01b219312d0688f59965e700c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...