1820 matches found
CVE-2024-30461
CVE-2024-30461 affects Tumult Hype Animations (WordPress plugin) up to version 1.9.11. The issue is an DOM-based XSS caused by improper input neutralization during web page generation, enabling script execution in the context of a user’s browser. Public sources consistently describe this as a Cro...
CVE-2023-49186
CVE-2023-49186 affects the WordPress plugin Machic Core (
SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips
The U.S. Securities and Exchange Commission SEC has filed charges against multiple companies for their alleged involvement in an elaborate cryptocurrency scam that swindled more than $14 million from retail investors. The complaint charged crypto asset trading platforms Morocoin Tech Corp., Berge...
CVE-2024-24844
CVE-2024-24844 concerns WordPress PowerPack Pro for Elementor (plugin), where versions up to and including 2.10.6 are affected by a missing authorization issue that allows unauthenticated exploitation of misconfigured access control, enabling unauthorized changes to plugin settings. The root caus...
CVE-2023-52210
CVE-2023-52210 concerns the WordPress plugin “Product Delivery Date for WooCommerce – Lite” (Tyche) with versions up to 2.7.0. Connected patchstack data indicates the root cause is broken access control that allows unauthenticated access, potentially impacting availability or operation. A fix is ...
CVE-2023-47232
Affected software: WordPress plugin WP Affiliate Disclosure (wp-affiliate-disclosure). Vulnerability type & root cause: Broken access control exposing limited operations to subscribers due to CSRF-like issues in check_capability, as reported for versions up to 1.2.6. Impact: Unauthorized changes ...
Number withdrawal
“ring” is a library developed by Brian Smith as an individual contributor. This CVE number has been withdrawn...
Number withdrawal
“ring” is a library developed by Brian Smith as an individual contributor. This CVE number has been withdrawn...
EUVD-2025-104510
Malicious code in individualgibbonz3n npm...
EUVD-2025-76567
Malicious code in individualworm-silentdev npm...
EUVD-2025-81564
Malicious code in individualwarblerdumbs npm...
EUVD-2025-63552
Malicious code in individualanglerfishz3n npm...
EUVD-2025-63551
Malicious code in individualcrocodilez3n npm...
EUVD-2025-53778
Malicious code in individual-turquoise-goat npm...
EUVD-2025-53779
Malicious code in individual-pink-hare npm...
Malicious code in individual-pink-hare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f164af61dc4ba6a5ace4c58a383ad84235ce221a763ebf189f89783d25299d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53777
Malicious code in individual-violet-firefly npm...
EUVD-2025-53781
Malicious code in individual-harlequin-puffin npm...