5557 matches found
PT-2025-33462 · WordPress · Add User Meta
Name of the Vulnerable Software and Affected Versions: Add User Meta plugin for WordPress versions up to and including 1.0.1 Description: The Add User Meta plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the add-user-meta page. Thi...
WordPress plugin Add User Meta 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Add User Meta plugin, which stems from missing or incorrect validation of random numbers on the "add-user-meta...
SUSE CVE-2025-8715
Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks...
Malicious code in earth-beta-scale-meta-cold (npm)
The package earth-beta-scale-meta-cold was found to contain malicious code...
Malicious code in meta-notify-rain-cat-fast (npm)
The package meta-notify-rain-cat-fast was found to contain malicious code...
Malicious code in meta-link-load-earth-parse (npm)
The package meta-link-load-earth-parse was found to contain malicious code...
Malicious code in meta-error-secure-encode-refactor (npm)
The package meta-error-secure-encode-refactor was found to contain malicious code...
Malicious code in easy-visualize-decode-phi-meta (npm)
The package easy-visualize-decode-phi-meta was found to contain malicious code...
MAL-2025-17924 Malicious code in daemon-cold-wind-meta-kappa (npm)
The package daemon-cold-wind-meta-kappa was found to contain malicious code...
gezi-core (>=0.0.0, <=0.0.2), meta-tags (0.0.0) potentially affected by unknown CVE via less-common-words (0.0.0)
less-common-words NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on less-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25174...
Malicious code in xi-psi-fire-meta-rain (npm)
The package xi-psi-fire-meta-rain was found to contain malicious code...
MAL-2025-19083 Malicious code in earth-beta-scale-meta-cold (npm)
The package earth-beta-scale-meta-cold was found to contain malicious code...
MAL-2025-20079 Malicious code in express-meta (npm)
The package express-meta was found to contain malicious code...
MAL-2025-26214 Malicious code in meta-analyze-cold-code-old (npm)
The package meta-analyze-cold-code-old was found to contain malicious code...
Malicious code in express-meta (npm)
The package express-meta was found to contain malicious code...
Malicious code in meta-compile-shell-quick-resolve (npm)
The package meta-compile-shell-quick-resolve was found to contain malicious code...
Malicious code in try-meta-error-water-cat (npm)
The package try-meta-error-water-cat was found to contain malicious code...
MAL-2025-26217 Malicious code in meta-error-secure-encode-refactor (npm)
The package meta-error-secure-encode-refactor was found to contain malicious code...