WS-2023-0190

Reflected XSS Vulnerability at detail/?lang parameter in GitHub repository splitbrain/dokuwiki-plugin-translation prior to 2023-05-17. If successfully exploited, this vulnerability could lead to several adverse consequences, including: Theft of sensitive information: An attacker could leverage th...

Authorization

The Theme and plugin translation for Polylang is vulnerable to authorization bypass in versions up to, and including, 3.2.16 due to missing capability checks in the processpolylangthemetranslationwploaded function. This makes it possible for unauthenticated attackers to update plugin and theme...

Malicious code in eslint-plugin-translation-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d3f1b78d30920863239e9f77d1fb8208df96b4cf0e41bf69fd693bba483041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in eslint-plugin-translation-vars

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-2828 Malicious code in eslint-plugin-translation-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d3f1b78d30920863239e9f77d1fb8208df96b4cf0e41bf69fd693bba483041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...