Malicious code in ithemes (npm)

The package ithemes was found to contain malicious code...

MAL-2025-23464 Malicious code in ithemes (npm)

The package ithemes was found to contain malicious code...

CVE-2020-36176

The iThemes Security formerly Better WP Security plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs...

CVE-2015-9374

Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9373

PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9372

Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9379

iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9363

iThemes Exchange before 1.12.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9371

Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9377

iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9366

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9375

Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9368

Easy EU Value Added VAT Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9365

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9378

iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9367

Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9364

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9376

iThemes Mobile before 1.2.8 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9370

Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2022-45825

Unauth. Reflected Cross-Site Scripting XSS vulnerability in iThemes WPComplete plugin = 2.9.2 versions...