PT-2026-4463

Name of the Vulnerable Software and Affected Versions Passionate Brains Add Expires Headers & Optimized Minify versions through 3.1.0 Description An authorization issue exists in Passionate Brains Add Expires Headers & Optimized Minify. The issue involves incorrectly configured access control...

CVE-2026-24633: Missing Authorization

Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a through = 3.2.0...

WordPress plugin “Add Expires Headers & Optimized Minify” has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

CVE-2026-24384

Cross-Site Request Forgery CSRF vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through = 2.14...

CVE-2026-24384 WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through = 2.14...

CVE-2026-24384

Cross-Site Request Forgery CSRF vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through = 2.14...

CVE-2026-24384

CVE-2026-24384 is a CSRF vulnerability in the WordPress plugin Merge + Minify + Refresh (launchinteractive). Affected versions are from n/a through 2.14. Red Hat and CIRCL entries confirm the vulnerability and indicate a patch has been issued; public exploit details are not provided. No explicit ...

CVE-2026-24384 WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through = 2.14...

CVE-2026-24384: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through = 2.14...

WordPress plugin Merge + Minify + Refresh has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4268

Cross-Site Request Forgery CSRF vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through = 2.14...

WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mrreee in WordPress Plugin Merge + Minify + Refresh versions = 2.14...

WordPress Add Expires Headers & Optimized Minify plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Add Expires Headers & Optimized Minify versions = 3.1.0...

EUVD-2025-176390

Malicious code in sigma-byte-minify-cache-float npm...

EUVD-2025-175638

Malicious code in water-await-kappa-byte-minify npm...

Malicious code in minify-mu-catch-authenticate-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3b2212cf649bbcec1267832b53976a224b9a0387e17e082b8641dda41bc920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179054

Malicious code in error-signal-minify-zero-index npm...

EUVD-2025-177827

Malicious code in minify-report-compress-compress-process npm...

Malicious code in scale-compress-minify-wind-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cf00479e7cd2290e4a0ccc2c84047c9a059d424a668bd7c886f48e901c9c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...