basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

Malicious code in 9c-lord-backend (npm)

The package 9c-lord-backend was found to contain malicious code. --- Credit: OpenSSF source...

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2024-38519 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2024-38519 Source advisory: OSV:PYSEC-2026-2065...

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

EUVD-2025-5635

Malicious code in bioql PyPI...

MAL-2025-7040 Malicious code in 9c-lord-backend (npm)

The package 9c-lord-backend was found to contain malicious code...

Malicious code in 9c-lord-backend (npm)

The package 9c-lord-backend was found to contain malicious code...

CVE-2025-1382

The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress Contact Us By Lord Linus plugin <= 2.6 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Contact Us By Lord Linus versions = 2.6...

CVE-2025-1382 Contact Us By Lord Linus <= 2.6 - Admin+ Stored XSS via CSRF

The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

PT-2025-10435

Name of the Vulnerable Software and Affected Versions Contact Us By Lord Linus WordPress plugin versions 2.6 and earlier Description The issue is related to the lack of CSRF check in some places and missing sanitisation as well as escaping in the Contact Us By Lord Linus WordPress plugin. This...

CVE-2025-1382: Cross-Site Request Forgery (CSRF)

The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2025-25127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...

CVE-2025-25127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...

CVE-2025-25127

CVE-2025-25127 is a reflected cross-site scripting (XSS) vulnerability affecting WordPress plugin Contact Us By Lord Linus up to version 2.6. The issue arises from improper input neutralization during web page generation, enabling attackers to reflect script payloads via user-supplied input. The ...

CVE-2025-25127 WordPress Contact Us By Lord Linus Plugin <= 2.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...

CVE-2025-25127 WordPress Contact Us By Lord Linus Plugin <= 2.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...