153 matches found
coderedcms (>=1.0.0rc1, <=1.0.3), coop (>=3.0.0, <=3.0.4) +32 more potentially affected by CVE-2026-54262 via wagtail (3.0.3)
wagtail PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =1.0.0rc1, =3.0.0, =2.0.0, =0.3.0, =1.5.0rc1, =1.1.1, =1.1.2 - wagtail-flags 5.2.0 - wagtail-footnotes 0.8.1 - wagtail-freezer 0.1.0 an...
Malicious Package
Overview localize-extract is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview localize-translate is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-14279 Malicious code in localize-translate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4a3b42b13a5ba692edd9761c2d32d6682f555828df49cb44e40b623861a1f0 On npm install, the package's postinstall lifecycle script collects installer host identifiers hostname, platform, arch, node version, package name,...
Malicious code in localize-translate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4a3b42b13a5ba692edd9761c2d32d6682f555828df49cb44e40b623861a1f0 On npm install, the package's postinstall lifecycle script collects installer host identifiers hostname, platform, arch, node version, package name,...
MAL-2026-14249 Malicious code in localize-extract (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265d3f1cc9dae0e1599e17054e0cebe1481224741d3c3dce5d78916feebd5da2 [email protected] executes a postinstall script that collects host identifiers os.hostname, platform, arch, node version, package name, lifecycl...
PT-2026-68019
Name of the Vulnerable Software and Affected Versions Super Progressive Web Apps versions prior to 2.2.44 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. The superpwa settingsoffline message txt setting is stored without sanitization and...
WordPress Localize My Post 1.0 - Local File Inclusion Detection
WordPress Localize My Post 1.0 is susceptible to local file inclusion via the ajax/include.php file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Localize My Post 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
PT-2026-63591
The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic function invocation on an attacker-controlled value with insufficient validation. This makes it possibl...
CVE-2026-9656
The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.62 via the wplocalizescript / window.leadinConfig JavaScript object. This makes it possible for authenticated attackers, with...
EUVD-2026-45152
The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.62 via the wplocalizescript / window.leadinConfig JavaScript object. This makes it possible for authenticated attackers, with...
PT-2026-57374
The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.10.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...
CVE-2026-57756
Contributor SQL Injection in nicen-localize-image = 1.4.9 versions...
EUVD-2026-41312
Contributor SQL Injection in nicen-localize-image = 1.4.9 versions...
CVE-2026-57756 WordPress nicen-localize-image plugin <= 1.4.9 - SQL Injection vulnerability
Contributor SQL Injection in nicen-localize-image = 1.4.9 versions...
CVE-2026-57756
Contributor SQL Injection in nicen-localize-image = 1.4.9 versions...
CVE-2026-57756 WordPress nicen-localize-image plugin <= 1.4.9 - SQL Injection vulnerability
Contributor SQL Injection in nicen-localize-image = 1.4.9 versions...
CVE-2026-57756
CVE-2026-57756 affects the WordPress plugin nicen-localize-image
