CVE-2025-9945

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the resetplugin function. This makes it possible for unauthenticated attackers to reset the plugin's...

WordPress Optimize More! – CSS plugin <= 1.0.3 - Cross-Site Request Forgery to Plugin Settings Reset vulnerability

Cross-Site Request Forgery to Plugin Settings Reset vulnerability discovered by Nabil Irawan in WordPress Plugin Optimize More! – CSS versions = 1.0.3...

EUVD-2025-11456

Malicious code in bioql PyPI...

EUVD-2024-35074

Malicious code in bioql PyPI...

EUVD-2023-29867

Malicious code in bioql PyPI...

EUVD-2025-18536

Malicious code in bioql PyPI...

EUVD-2025-3309

Malicious code in bioql PyPI...

EUVD-2024-28461

Malicious code in bioql PyPI...

EUVD-2023-29446

Malicious code in bioql PyPI...

EUVD-2024-28401

Malicious code in bioql PyPI...

EUVD-2025-11454

Malicious code in bioql PyPI...

EUVD-2025-19269

Malicious code in bioql PyPI...

CVE-2025-9945 Optimize More! – CSS <= 1.0.3 - Cross-Site Request Forgery to Plugin Settings Reset

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the resetplugin function. This makes it possible for unauthenticated attackers to reset the plugin's...

WordPress plugin Optimize More! – CSS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Optimize...

CVE-2025-9945: Cross-Site Request Forgery (CSRF)

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the resetplugin function. This makes it possible for unauthenticated attackers to reset the plugin's...

Malicious code in yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin (npm)

The package yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin was found to contain malicious code...

Malicious code in gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin (npm)

The package gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin was found to contain malicious code...

Malicious code in membrane-optimize-css-assets-webpack-plugin-plutology-gatsby (npm)

The package membrane-optimize-css-assets-webpack-plugin-plutology-gatsby was found to contain malicious code...

Malicious code in style-loader-optimize-css-assets-webpack-plugin-octans-ursa (npm)

The package style-loader-optimize-css-assets-webpack-plugin-octans-ursa was found to contain malicious code...

Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm)

The package paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa was found to contain malicious code...