Malicious code in suite-level-tags (npm)

The package suite-level-tags was found to contain malicious code...

Malicious code in level-flush (npm)

The package level-flush was found to contain malicious code...

Malicious code in test-mlw2-coomb-worse-level-alias (npm)

The package test-mlw2-coomb-worse-level-alias was found to contain malicious code...

Malicious code in socket-first-level-dep-1 (npm)

The package socket-first-level-dep-1 was found to contain malicious code...

Malicious code in level-json-cache (npm)

The package level-json-cache was found to contain malicious code...

Malicious code in level-client (npm)

The package level-client was found to contain malicious code...

MAL-2025-34169 Malicious code in suite-level-tags (npm)

The package suite-level-tags was found to contain malicious code...

MAL-2025-34952 Malicious code in test-mlw2-bests-level (npm)

The package test-mlw2-bests-level was found to contain malicious code...

MAL-2025-18100 Malicious code in dbk-top-level-layouts (npm)

The package dbk-top-level-layouts was found to contain malicious code...

MAL-2025-25199 Malicious code in level-json (npm)

The package level-json was found to contain malicious code...

Malicious code in test-mlw2-bests-level (npm)

The package test-mlw2-bests-level was found to contain malicious code...

Malicious code in level-json-wrapper (npm)

The package level-json-wrapper was found to contain malicious code...

MAL-2025-25197 Malicious code in level-client (npm)

The package level-client was found to contain malicious code...

MAL-2025-25201 Malicious code in level-json-wrapper (npm)

The package level-json-wrapper was found to contain malicious code...

CVE-2025-53221 WordPress CodeablePress plugin <= 1.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in codeablepress CodeablePress codeablepress-simple-frontend-profile-picture-upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CodeablePress: from n/a through = 1.0.2...

CVE-2025-8314

The Software Issue Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccessmsg parameter in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-42934

SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed LF characters into application inputs. This vulnerability has a low impact on the...

CVE-2025-8874

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.0.8.6 due to insufficient input sanitization and output...

CVE-2025-8874 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.0.8.6 due to insufficient input sanitization and output...

CVE-2025-8690

The Simple Responsive Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inje...