tsup DOM Clobbering vulnerability

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...

CVE-2025-25164

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yuichiro ABE Meta Accelerator meta-accelerator allows Reflected XSS.This issue affects Meta Accelerator: from n/a through = 1.0.4...

CVE-2025-25169

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry Authors Autocomplete Meta Box authors-autocomplete-meta-box allows Reflected XSS.This issue affects Authors Autocomplete Meta Box: from n/a through = 1.2...

Malicious code in meta-event (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1901 Malicious code in meta-event (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1900 Malicious code in meta-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in meta-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in meta-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1899 Malicious code in meta-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in meta-cache (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1898 Malicious code in meta-cache (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1897 Malicious code in meta-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in meta-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in meta-analytics (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1896 Malicious code in meta-analytics (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-25164

CVE-2025-25164 affects WordPress Meta Accelerator plugin versions up to 1.0.4, where Reflected XSS arises from improper input neutralization during web page generation. Root cause: improper neutralization of user input leads to reflected cross-site scripting. Impact: XSS could affect pages render...

CVE-2025-25164 WordPress Meta Accelerator plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yuichiro ABE Meta Accelerator meta-accelerator allows Reflected XSS.This issue affects Meta Accelerator: from n/a through = 1.0.4...

CVE-2025-25169

CVE-2025-25169 affects the WordPress plugin Authors Autocomplete Meta Box (versions

CVE-2025-25169 WordPress Authors Autocomplete Meta Box plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry Authors Autocomplete Meta Box authors-autocomplete-meta-box allows Reflected XSS.This issue affects Authors Autocomplete Meta Box: from n/a through = 1.2...

CVE-2025-25164 WordPress Meta Accelerator plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yuichiro ABE Meta Accelerator meta-accelerator allows Reflected XSS.This issue affects Meta Accelerator: from n/a through = 1.0.4...