29 matches found
WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ihsan Saddan in WordPress Plugin Image Gallery block – Create and display photo gallery/photo album. versions = 2.4.1...
CVE-2026-108699
hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosignverifyargs accepts any signer identity and OIDC issuer by default. Attackers controlling a plugin image reference can sign a malicious image...
WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.13...
WordPress Photo Gallery, Sliders, Proofing and Themes plugin < 4.5.0 - Authenticated Plugin Image Settings Update vulnerability
Authenticated Plugin Image Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin NextGEN Gallery versions 4.5.0...
Malicious code in vite-plugin-image-tracker (npm)
Source: amazon-inspector 019affd7dfc88e28b20dcce52fe53661a514582fb11c51871126b967399a01d8 The package presents itself as a Vite image-tracking plugin. At build time its transformIndexHtml hook injects a script into every produced HTML page. In the end-user's browser that script reads user objects...
Malicious code in vite-plugin-image-analysis (npm)
Source: amazon-inspector e61313bbeab91eb687fc7969f9dcc1478d4b672e1f02f91e56fa886e5ea7bd04 The package presents itself as a Vite 'image analysis' plugin but contains no image-analysis code. Its transformIndexHtml hook injects an inline into every built HTML page. The injected script reads user...
MAL-2026-14481 Malicious code in vite-plugin-image-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019affd7dfc88e28b20dcce52fe53661a514582fb11c51871126b967399a01d8 The package presents itself as a Vite image-tracking plugin. At build time its transformIndexHtml hook injects a script into every produced HTML page...
Malicious code in vite-plugin-image-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019affd7dfc88e28b20dcce52fe53661a514582fb11c51871126b967399a01d8 The package presents itself as a Vite image-tracking plugin. At build time its transformIndexHtml hook injects a script into every produced HTML page...
MAL-2026-14480 Malicious code in vite-plugin-image-analysis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61313bbeab91eb687fc7969f9dcc1478d4b672e1f02f91e56fa886e5ea7bd04 The package presents itself as a Vite 'image analysis' plugin but contains no image-analysis code. Its transformIndexHtml hook injects an inline into...
Malicious code in vite-plugin-image-analysis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61313bbeab91eb687fc7969f9dcc1478d4b672e1f02f91e56fa886e5ea7bd04 The package presents itself as a Vite 'image analysis' plugin but contains no image-analysis code. Its transformIndexHtml hook injects an inline into...
Malicious Package
Overview vite-plugin-image-analysis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview vite-plugin-image-tracker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
org.webjars.npm:draft-js (>=0.9.0, <=0.11.7), org.webjars.npm:github-com-marmelab-restful-js (0.9.6) +2 more potentially affected by CVE-2026-59879 via org.webjars.npm:immutable (3.7.6)
org.webjars.npm:immutable MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:immutable and may be impacted: - org.webjars.npm:draft-js =0.9.0, =0.5.5, =0.8.10 - org.webjars.npm:rc-editor-plugin-image 0.0.3 Source cves:...
org.webjars.npm:draft-js (>=0.9.0, <=0.11.7), org.webjars.npm:github-com-marmelab-restful-js (0.9.6) +2 more potentially affected by CVE-2026-59880 via org.webjars.npm:immutable (3.7.6)
org.webjars.npm:immutable MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:immutable and may be impacted: - org.webjars.npm:draft-js =0.9.0, =0.5.5, =0.8.10 - org.webjars.npm:rc-editor-plugin-image 0.0.3 Source cves:...
Malware in @antv/g-plugin-image-loader
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2026-24031
OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction DoS...
WordPress Plugin Category: Cross-Site Script Vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...
Malicious code in vite-plugin-image-loader (npm)
The package vite-plugin-image-loader was found to contain malicious code...