Malicious code in matic-root-subgraphs (npm)

The package matic-root-subgraphs was found to contain malicious code...

MAL-2025-26011 Malicious code in matic-root-subgraphs (npm)

The package matic-root-subgraphs was found to contain malicious code...

MAL-2025-15039 Malicious code in augur-matic (npm)

The package augur-matic was found to contain malicious code...

Malicious code in augur-matic (npm)

The package augur-matic was found to contain malicious code...

Malicious code in matic-snaps (npm)

The package matic-snaps was found to contain malicious code...

MAL-2025-5305 Malicious code in lard-o-matic (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a6fa707dcb7f80a3e943088ac8c83eda76a55bc12da4f624427135f4e8677ea Any computer that has this package installed or running should be considered...

Malicious code in lard-o-matic (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a6fa707dcb7f80a3e943088ac8c83eda76a55bc12da4f624427135f4e8677ea Any computer that has this package installed or running should be considered...

CVE-2024-3671

The Print-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'print-me' shortcode in all versions up to, and including, 2.1.10 due to insufficient input sanitization and output escaping on user supplied attributes such as 'tag'. This makes it possible for...

CVE-2024-33936

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Twinpictures Print-O-Matic allows Stored XSS.This issue affects Print-O-Matic: from n/a through 2.1.10...

CVE-2023-40669

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in twinpictures, baden03 Collapse-O-Matic plugin = 1.8.5.5 versions...

CVE-2023-32578

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

CVE-2023-7030

The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' shortcode in all versions up to, and including, 1.8.5.5 due to insufficient input sanitization and output escaping on the 'tag' user supplied attribute. This makes it possible for...

CVE-2022-4373

The Quote-O-Matic WordPress plugin through 1.0.5 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2022-4753

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

CVE-2022-4475

The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2021-24710

The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2002-2011

Cross-site scripting XSS vulnerability in the fom CGI program fom.cgi in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter...

MAL-2025-206 Malicious code in matic-child-subgraphs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085980a7e031404b3267eff3f19584b087b5ce5329ce9fa17265b00ef3ea2f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matic-child-subgraphs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085980a7e031404b3267eff3f19584b087b5ce5329ce9fa17265b00ef3ea2f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability in the component `/src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r` of the software for automatically generating integrated user interfaces in Umbraco UI-O-Matic allows a hacker to execute arbitrary SQL code.

The vulnerability of the /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r component of the software for automatically generating integrated user interfaces in Umbraco UI-O-Matic is related to the lack of security measures for handling SQL queries. Exploiting this vulnerability allows a...