WordPress Fast Velocity Minify plugin <= 3.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Cody Sixteen in WordPress Plugin Fast Velocity Minify versions = 3.5.1...

CVE-2025-12034: Improper Neutralization of Input During Web Page Generation

The Fast Velocity Minify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

PT-2025-43724

Name of the Vulnerable Software and Affected Versions Fast Velocity Minify versions prior to 3.5.1 Description The Fast Velocity Minify plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output escaping allow authenticate...

EUVD-2025-34891

A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...

UBUNTU-CVE-2025-57567

A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...

CVE-2025-57567

A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...

CVE-2025-57567

A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor , specifically within the minify.php file located in the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator can exploit this by overwriting the file with arbitrary PHP code via t...

EUVD-2019-9571

Malware in sbrugna...

EUVD-2024-51517

Malicious code in bioql PyPI...

EUVD-2023-29901

Malicious code in bioql PyPI...

EUVD-2023-31351

Malicious code in bioql PyPI...

Malicious code in zero-static-scale-minify-encode (npm)

The package zero-static-scale-minify-encode was found to contain malicious code...

MAL-2025-46879 Malicious code in zero-static-scale-minify-encode (npm)

The package zero-static-scale-minify-encode was found to contain malicious code...

Exploit for Inefficient Regular Expression Complexity in Jqueryvalidation Jquery_Validation

PoC exploit for CVE-2022-31147, a path traversal flaw in matthia...

Malicious code in xi-epsilon-star-minify-eta (npm)

The package xi-epsilon-star-minify-eta was found to contain malicious code...

MAL-2025-23084 Malicious code in import-grep-void-await-minify (npm)

The package import-grep-void-await-minify was found to contain malicious code...

MAL-2025-39878 Malicious code in xml-query-minify-error-lambda (npm)

The package xml-query-minify-error-lambda was found to contain malicious code...

Malicious code in postcss-minify-browser (npm)

The package postcss-minify-browser was found to contain malicious code...

Malicious code in hot-air-thread-minify-assert (npm)

The package hot-air-thread-minify-assert was found to contain malicious code...

MAL-2025-26435 Malicious code in minify-catch-function-object-epsilon (npm)

The package minify-catch-function-object-epsilon was found to contain malicious code...