CVE-2025-39456

Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Logger: from n/a through = 2.2...

WordPress plugin WP Logger 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-17015 · Unknown · Itron Wp Logger

Name of the Vulnerable Software and Affected Versions: iTRON WP Logger versions prior to 2.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions prior to 2.2, updat...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when the ConfigurationImpl logger is being set to debug level. An attacker can access sensitive broker properties by exploiting the verbose logging configuration. Workaround This...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to concurrent writes to a map by logger.go. An attacker can induce a read-write conflict and cause repeated restarts and then a panic by writing to multiple logs simultaneously. Remediation There is no fixed version f...

chainMaker 安全漏洞

chainMaker is a Go library in the Go open source. A security vulnerability exists in chainMaker versions prior to 2.4.0, which stems from logger.go mishandling concurrent writes to mappings, which can lead to read/write conflicts and crashes...

Malicious code in cln-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b9cc716f2f19131b4daf97b6c72c4b58b5b71d337760dc41188971098e4fb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consolidate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cabd5f8487415db9bef4d60ff036c16f1390e7d129fa4fbd96045e096eb1e897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2658 Malicious code in cln-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b9cc716f2f19131b4daf97b6c72c4b58b5b71d337760dc41188971098e4fb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2661 Malicious code in consolidate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cabd5f8487415db9bef4d60ff036c16f1390e7d129fa4fbd96045e096eb1e897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-28866

Cross-Site Request Forgery CSRF vulnerability in smerriman Login Logger login-logger allows Cross Site Request Forgery.This issue affects Login Logger: from n/a through = 1.2.1...

Malicious code in paypal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c178990e4d2abbd4e7efb2ade6f3fe47a33939e54842b787848f1be8809ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2398 Malicious code in paypal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c178990e4d2abbd4e7efb2ade6f3fe47a33939e54842b787848f1be8809ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Login Logger plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Login Logger versions = 1.2.1...

CVE-2025-28866

Cross-Site Request Forgery CSRF vulnerability in smerriman Login Logger allows Cross Site Request Forgery. This issue affects Login Logger: from n/a through 1.2.1...

CVE-2025-28866

Cross-Site Request Forgery CSRF vulnerability in smerriman Login Logger login-logger allows Cross Site Request Forgery.This issue affects Login Logger: from n/a through = 1.2.1...

CVE-2025-28866 WordPress Login Logger plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in smerriman Login Logger login-logger allows Cross Site Request Forgery.This issue affects Login Logger: from n/a through = 1.2.1...

CVE-2025-28866

CSRF vulnerability CVE-2025-28866 affects WordPress Login Logger plugin versions up to and including 1.2.1. The issue allows Cross-Site Request Forgery, with an attacker potentially tricking an authenticated user to perform unintended actions. The CVSS details indicate network access, low attack ...

WordPress plugin Login Logger 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

The vulnerability of the Python JSON Logger library, a programming language, stems from the inclusion of functions from an unverified and uncontrolled area. This allows attackers to execute arbitrary code.

The vulnerability of the Python JSON Logger library is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by deploying a specially crafted package...