68 matches found
CVE-2025-13999
The HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions from 2.4.0 up to, and including, 2.5.1 via the getIcyMetadata function. This makes it possible for unauthenticated attackers to make web...
CVE-2025-13999
The HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions from 2.4.0 up to, and including, 2.5.1 via the getIcyMetadata function. This makes it possible for unauthenticated attackers to make web...
CVE-2025-13999 HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
The HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions from 2.4.0 up to, and including, 2.5.1 via the getIcyMetadata function. This makes it possible for unauthenticated attackers to make web...
CVE-2025-13999 HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
The HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions from 2.4.0 up to, and including, 2.5.1 via the getIcyMetadata function. This makes it possible for unauthenticated attackers to make web...
PT-2025-52419
Name of the Vulnerable Software and Affected Versions HTML5 Audio Player WordPress Plugin versions 2.4.0 through 2.5.1 Description The HTML5 Audio Player WordPress Plugin is susceptible to a Server-Side Request Forgery SSRF condition. This allows unauthenticated attackers to initiate web requests...
EUVD-2025-117315
Malicious code in icy-lavender-hoverfly npm...
EUVD-2025-98143
Malicious code in icyotterz3n npm...
EUVD-2025-91224
Malicious code in icyblackbirdz3n npm...
EUVD-2025-91222
Malicious code in icyostrichz3n npm...
EUVD-2025-79075
Malicious code in icylandfowlz3n npm...
Malicious code in icy_pig_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0481a1c5ce0d14f56a8b346e792b8dcfc8dac4a35157a11eea17aac2f58ccfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79074
Malicious code in icymammalz3n npm...
Malicious code in icy_dinosaur_dumbs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891d5807b10ffe21dca5c740a642fab5b967f0b380d3b9e8112699b1f56a513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-69928
Malicious code in icyrhinocerosz3n npm...
MAL-2025-94904 Malicious code in icy_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660b7961b1bfff603af9ec5921f1b1ecf0482030b088345e9ca10a017e5f691f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in icy-amber-jay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d51d04a14711acc3e5341977d5e9af8863614c53ae5f9b86ffd73ad18da1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53893
Malicious code in icy-amber-jay npm...
Malicious code in icy-amaranth-otter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30245573987429568f5b423c0ffb0f2af8b0f73c560254234ffdcfb72bd757a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in icy-black-goose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52506c0ffeb3b00f0a77c12a8ae7e3553a0a580af67cc9a0e2df1580f1b7b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...