4765 matches found
CVE-2025-12088
CVE-2025-12088 affects the WordPress plugin Meta Display Block (versions
mihomo 安全漏洞
mihomo is an open source API interface for MetaCubeX. A security vulnerability exists in mihomo version v1.19.11, which stems from improper access control and could lead to reading arbitrary files...
WordPress plugin Meta Display Block 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
Mozilla Firefox ESR < 60.2
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-21 advisory. - A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...
PT-2025-47277
Name of the Vulnerable Software and Affected Versions Meta Display Block plugin for WordPress versions prior to 1.0.1 Description The Meta Display Block plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Meta Display Block. Insufficient input sanitization and output...
WordPress Meta Display Block plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin Meta Display Block versions = 1.0.0...
EUVD-2025-150406
The SureForms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.1 via the 'srfmemailnotification' post meta registration. This is due to setting the 'authcallback' parameter to 'returntrue', which allows unauthenticated access to the...
CVE-2025-12536
CVE-2025-12536 affects WordPress SureForms plugin up to version 1.13.1. The issue is missing authorization on the _srfm_email_notification post meta, where the auth_callback was set to __return_true, allowing unauthenticated access to sensitive metadata (e.g., email notification configurations, C...
CVE-2025-12536 SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure
The SureForms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.1 via the 'srfmemailnotification' post meta registration. This is due to setting the 'authcallback' parameter to 'returntrue', which allows unauthenticated access to the...
EUVD-2025-179155
Malicious code in emulate-throw-root-meta-file npm...
EUVD-2025-175953
Malicious code in thread-simulate-meta-small-cat npm...
EUVD-2025-177883
Malicious code in meta-grep-stack-serialize-authenticate npm...
EUVD-2025-177884
Malicious code in meta-fire-validate-refactor-cache npm...
EUVD-2025-177886
Malicious code in meta-boolean-analyze-decode-cloud npm...
EUVD-2025-179917
Malicious code in cache-meta-root-try-key npm...
EUVD-2025-179137
Malicious code in encrypt-meta-authenticate-log-string npm...
EUVD-2025-177759
Malicious code in moon-unix-meta-process-kernel npm...
EUVD-2025-176234
Malicious code in stack-theta-meta-index-web npm...
Malicious code in theta-validate-meta-air-cat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d3e186b062df4165b4ff6124f4467a91df506dc840e45e44a67191212c48ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...