1586 matches found
WordPress Gravity Forms plugin <= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked Upload vulnerability
Unauthenticated Arbitrary File Upload via Legacy Chunked Upload vulnerability discovered by Talal Nasraddeen in WordPress Plugin Gravity Forms versions = 2.9.21.1...
VulnCheck KEV: CVE-2025-12974
The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the legacy chunked upload mechanism in all versions up to, and including, 2.9.21.1. This is due to the extension blacklist not including .phar files, which can be uploaded through...
Malicious code in fusion-gravity-css-loader-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52baf9ca8ebdb49763df8f528108db23d21f441b6cd5d8a94e2be0ad3edd8db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gravity-juno-cors-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8097a0705bf1ad76bb1607942f6aa70d99247cce4d60a546977d03b5d6d255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gravity-wezen-sequelize-fermion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e705d37886617b79af3e4139947f47eb9b4a67b7b11b7b5fe989694e66d8e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in warp-sails-selenology-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f0910172b210dd6224affb0c347ae9b8f4c3a38904d99e2133ff82b3f9f175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175993
Malicious code in test-fork-gravity-puppeteer npm...
EUVD-2025-175966
Malicious code in thermochronology-gravity-commitlint-element-ui npm...
EUVD-2025-175649
Malicious code in warp-sails-selenology-gravity npm...
EUVD-2025-175504
Malicious code in xenon-graviton-gravity-pulsar npm...
EUVD-2025-177647
Malicious code in neptunology-gravity-start-interferometry npm...
EUVD-2025-177633
Malicious code in neutronstar-gravity-aether-bulma npm...
EUVD-2025-177481
Malicious code in odin-nightwatch-singularity-gravity npm...
EUVD-2025-177281
Malicious code in pegasus-parcel-gravity-cassini npm...
EUVD-2025-177229
Malicious code in phenomic-got-norma-gravity npm...
EUVD-2025-177201
Malicious code in phoebe-yildun-gravity-meissa npm...
EUVD-2025-176429
Malicious code in sequelize-paleontology-gravity-webdriver-manager npm...
EUVD-2025-177979
Malicious code in magellan-gravity-solarnebula-dotenv-safe npm...