MAL-2025-41560 Malicious code in etoro-plaid-widget (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in etoro-plaid-widget (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5285 Malicious code in react-plaid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e5a7cd6740a8b92b5b0c681bce252fd1850ace8501de899aea496321176c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plaid-tiny-quickstart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6583cf366a5d9b2b4b3e8aaf4960a74b8fcc1224d6d862a5947ee56570dc252 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress LittleBot ACH for Stripe + Plaid Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Software LittleBot ACH for Stripe + Plaid Type Plugin Vulnerable versions = 1.2.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5af20012a51f Credits Rafie Muhammad...

WordPress LittleBot ACH for Stripe + Plaid plugin <= 1.2.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress LittleBot ACH for Stripe + Plaid plugin versions = 1.2.8. Solution No patched version available...

WordPress LittleBot ACH for Stripe + Plaid plugin <= 1.2.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress LittleBot ACH for Stripe + Plaid plugin versions = 1.2.8. Solution No patched version available...

browser-forms (>=0.0.1 <=0.0.2), express-stormpath (>=0.1.0 <=0.5.8) +4 more potentially affected by CVE-2021-23388 via forms (>=0.1.0 <=1.1.4)

forms NPM version =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =0.3.1, =0.0.1, =0.1.1 Source cves: CVE-2021-23388 Source advisory: OSV:GHSA-C56F-GRV3-GPFR...