MAL-2025-8026 Malicious code in @hishprorg/esse-nam (npm)

The package @hishprorg/esse-nam was found to contain malicious code...

MAL-2025-8184 Malicious code in @kollusietea/nam-eum-vitae-provident (npm)

The package @kollusietea/nam-eum-vitae-provident was found to contain malicious code...

CVE-2024-34417

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Toidicode.Com thanhtaivtt Viet Nam Affiliate allows Stored XSS.This issue affects Viet Nam Affiliate: from n/a through 1.0.0...

WordPress WC Affiliate plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-all vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Exposure via wf-export-all vulnerability discovered by Thanh Nam Tran in WordPress Plugin WC Affiliate versions = 2.5.3...

WordPress SurveyJS plugin <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Deletion via SurveyJSDeleteFile vulnerability discovered by Thanh Nam Tran in WordPress Plugin SurveyJS versions = 1.12.17...

CVE-2025-24001

Cross-Site Request Forgery CSRF vulnerability in Ngô Thắng IT PPO Call To Actions ppo-call-to-actions allows Cross Site Request Forgery.This issue affects PPO Call To Actions: from n/a through = 0.1.3...

CVE-2025-23759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gavin Affiliate Tools Việt Nam affiliate-tools-viet-nam allows Reflected XSS.This issue affects Affiliate Tools Việt Nam: from n/a through = 0.3.17...

CVE-2025-23759 WordPress Affiliate Tools Việt Nam plugin <= 0.3.17 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gavin Affiliate Tools Việt Nam affiliate-tools-viet-nam allows Reflected XSS.This issue affects Affiliate Tools Việt Nam: from n/a through = 0.3.17...

WordPress plugin Affiliate Tools Việt Nam 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2025-5070 · Unknown · Leduchuy89Vn Affiliate Tools Việt Nam

Name of the Vulnerable Software and Affected Versions: leduchuy89vn Affiliate Tools Việt Nam versions 0.3.17 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means...

CVE-2025-24001

Cross-Site Request Forgery CSRF vulnerability in Ngô Thắng IT PPO Call To Actions ppo-call-to-actions allows Cross Site Request Forgery.This issue affects PPO Call To Actions: from n/a through = 0.1.3...

WordPress WP Hotel Booking plugin <= 2.1.5 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Thanh Nam Tran in WordPress Plugin WP Hotel Booking versions = 2.1.5...

WordPress Affiliate Tools Việt Nam plugin <= 0.3.17 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Affiliate Tools Việt Nam versions = 0.3.17...

WordPress Essential WP Real Estate plugin <= 1.1.3 - Missing Authorization to Arbitrary Post/Page Deletion vulnerability

Missing Authorization to Arbitrary Post/Page Deletion vulnerability discovered by Thanh Nam Tran in WordPress Plugin Essential WP Real Estate versions = 1.1.3...

WordPress School Management System – SakolaWP plugin <= 1.0.8 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin School Management System – SakolaWP versions = 1.0.8...

Malicious code in confidential-package-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ca97a7c95d3a7f0bc8302fdfa94f96077f03fa620c53c49791fa260617d310 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress CRM WordPress Plugin plugin <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation vulnerability

Missing Authorization to Account Takeover/Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin RepairBuddy versions = 3.8120...

WordPress Login with phone number plugin <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation vulnerability

Authenticated Subscriber+ Authorization Bypass to Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin Login with phone number versions = 1.7.49...

Malicious code in @diotoborg/accusamus-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 800a2236f47e2846d9c8149c53afd493ae23544afcd9ebe2d1818044afb8247c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nam-adipisci-fuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a50dd8df10e9dfb8c76c18bbb3f6af7e19dc0b2375d1d8e37204f39247b5df08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...