245 matches found
CVE-2025-12034 Fast Velocity Minify <= 3.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
The Fast Velocity Minify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2025-12034 Fast Velocity Minify <= 3.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
The Fast Velocity Minify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
WordPress Fast Velocity Minify plugin <= 3.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Cody Sixteen in WordPress Plugin Fast Velocity Minify versions = 3.5.1...
PT-2025-43724
Name of the Vulnerable Software and Affected Versions Fast Velocity Minify versions prior to 3.5.1 Description The Fast Velocity Minify plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output escaping allow authenticate...
EUVD-2025-34891
A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...
UBUNTU-CVE-2025-57567
A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...
CVE-2025-57567
A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...
CVE-2025-57567
The CVE-2025-57567 entry concerns PluXml CMS. A vulnerability in the default theme’s minify.php (path: /themes/defaut/css/minify.php) can be triggered by an authenticated administrator who overwrites the file with arbitrary PHP code via the admin panel, enabling remote code execution (system comm...
EUVD-2019-9571
Malware in sbrugna...
EUVD-2024-51517
Malicious code in bioql PyPI...
EUVD-2023-31351
Malicious code in bioql PyPI...
EUVD-2023-29901
Malicious code in bioql PyPI...
Malicious code in zero-static-scale-minify-encode (npm)
The package zero-static-scale-minify-encode was found to contain malicious code...
MAL-2025-46879 Malicious code in zero-static-scale-minify-encode (npm)
The package zero-static-scale-minify-encode was found to contain malicious code...
Exploit for Inefficient Regular Expression Complexity in Jqueryvalidation Jquery_Validation
PoC exploit for CVE-2022-31147, a path traversal flaw in matthia...
Malicious code in hot-air-thread-minify-assert (npm)
The package hot-air-thread-minify-assert was found to contain malicious code...
Malicious code in xi-epsilon-star-minify-eta (npm)
The package xi-epsilon-star-minify-eta was found to contain malicious code...
Malicious code in postcss-minify-browser (npm)
The package postcss-minify-browser was found to contain malicious code...