MAL-2025-50066 Malicious code in cici-nasiuduk79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3041ecbb730c65dcbf94eb47435c4fca9dafd141ad8f44ced46647435ecb984c The package cici-nasiuduk79-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2025-33820

The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's filemodified shortcode in all versions up to, and including, 4.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9496 Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode

The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's filemodified shortcode in all versions up to, and including, 4.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2025-41646

Name of the Vulnerable Software and Affected Versions Enable Media Replace plugin for WordPress versions up to and including 4.1.6 Description The software is susceptible to Stored Cross-Site Scripting through the file modified shortcode. Insufficient input sanitization and output escaping on...