CVE-2025-32548 WordPress Hamburger Icon Menu Lite Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in borisolhor Hamburger Icon Menu Lite allows Reflected XSS. This issue affects Hamburger Icon Menu Lite: from n/a through 1.0...

WordPress plugin Hamburger Icon Menu Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-17111 · Unknown · Hamburger Icon Menu Lite

Name of the Vulnerable Software and Affected Versions: Hamburger Icon Menu Lite versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker ca...

Malicious code in @csds-web-components/csds-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dc035502fe2552360c01c2157ffadef0e94f13981a392ac55b634cac666e4d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-32807

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...

WordPress Hamburger Icon Menu Lite Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Hamburger Icon Menu Lite versions = 1.0...

PT-2025-16015 · Unknown +1 · Fusiondirectory +1

Name of the Vulnerable Software and Affected Versions: FusionDirectory versions prior to 1.5 Description: A path traversal vulnerability in FusionDirectory allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon paramete...

CVE-2025-31825

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through = 1.0.1...

CVE-2025-31825

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through = 1.0.1...

CVE-2025-31825 WordPress Category Icon plugin <= 1.0.0 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon allows Path Traversal. This issue affects Category Icon: from n/a through 1.0.0...

CVE-2025-31825 WordPress Category Icon plugin <= 1.0.1 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through = 1.0.1...

CVE-2025-31825

CVE-2025-31825 : Path Traversal in the Category Icon WordPress plugin allows authenticated authors to access restricted directories and download arbitrary files. Affected: Category Icon

PT-2025-14739 · Pixelgrade · Category Icon

Name of the Vulnerable Software and Affected Versions: Category Icon versions through 1.0.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the pixelgrade Category Icon...

WordPress plugin Category Icon 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exists ...

Malicious code in niji-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3647824806820bc4dec51343c82379b9993e030f8e9ccfcfded364905ec87d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3076 Malicious code in niji-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3647824806820bc4dec51343c82379b9993e030f8e9ccfcfded364905ec87d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdn-icon-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6e6ce42315c38bb4b79009fe96871dc66ebb2264708567c3fc78d6b96e9c73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdn-icon-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c5df12b33f292879e5c1199fb8a0130cbbb1a1cd4cf1d3e72cb723143ccaa1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdn-icon-fetcher-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71170b5cf713c4abd33856c7cabcf76ea0e5141bc79c5d3a7fd74568d978aad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2655 Malicious code in cdn-icon-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6e6ce42315c38bb4b79009fe96871dc66ebb2264708567c3fc78d6b96e9c73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...