MAL-2025-7450 Malicious code in @crabas0npm/optio-modi-a-necessitatibus (npm)

The package @crabas0npm/optio-modi-a-necessitatibus was found to contain malicious code...

MAL-2025-9602 Malicious code in @waitfortea2024/aperiam-optio-necessitatibus (npm)

The package @waitfortea2024/aperiam-optio-necessitatibus was found to contain malicious code...

CVE-2024-12507

The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-12507

The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-12507 Optio Dentistry <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-12507 Optio Dentistry <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-12507

The Optio Dentistry plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability in the optio-lightbox shortcode, affecting all versions up to 2.1, due to insufficient input sanitization and output escaping. An authenticated attacker with contributor-level access or higher can injec...

PT-2024-17632 · WordPress · Optio Dentistry

Name of the Vulnerable Software and Affected Versions: Optio Dentistry plugin for WordPress versions up to, and including, 2.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode due to insufficient input sanitization and output escaping on...

WordPress plugin Optio Dentistry 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Optio Dentistry plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Optio Dentistry versions = 2.1...

Malicious code in @diotoborg/optio-maiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85e63734bd6e69b5e2e97d770c36121cea4539199bda93418ade7b28048470d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8504 Malicious code in @diotoborg/officiis-optio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4320fd5bcade789cdb77ae7b1b3ac61d034a81489784855dbc08cbe9afff11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/explicabo-optio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f3975fedcfc6726d65dae7f25694b47111c727e6b3dd55c266b5479221a15d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/corporis-optio-tenetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35c2078e887438addd4ca2de49c5c0dea37ba86f482b5546992775eb2ba60386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8329 Malicious code in @diotoborg/explicabo-optio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f3975fedcfc6726d65dae7f25694b47111c727e6b3dd55c266b5479221a15d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quae-optio-culpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6cb5281b2501d4e793858c5a9463dbdc1c49babe7fc1c2b23bf9092dd1ec148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8538 Malicious code in @diotoborg/quae-optio-culpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6cb5281b2501d4e793858c5a9463dbdc1c49babe7fc1c2b23bf9092dd1ec148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/optio-voluptatum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cde686890e06037a494de14f7f01abaf10bdd76ff6ab441ff9dacdbc219e5427 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/optio-provident-omnis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc453c5b757978738907b9a9b8be9dfb6793b8cb4ebe72a90b201983493bd9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nulla-optio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e89a3ade2b8000f54cee1cb435a75e205d0ae04cf62fa87e6b8242de8683523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...