CVE-2026-14603

The CVE concerns the WowOptin: Next-Gen Popup Maker WordPress plugin (before 1.4.38). Affected component is the REST API endpoint, where insufficient authorization allows unauthenticated users to disable all opt-in forms and insert new template-based opt-in rows into the database. This represents...

MAL-2025-15297 Malicious code in babel-plugin-transform-inject-template (npm)

The package babel-plugin-transform-inject-template was found to contain malicious code...

Malicious code in babel-plugin-transform-inject-template (npm)

The package babel-plugin-transform-inject-template was found to contain malicious code...