11046 matches found
CVE-2026-66685
The connected documents identify a vulnerability in the WordPress Featured Video Plus plugin, affected versions
CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...
CVE-2026-66685
Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...
EUVD-2026-53896
Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...
CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...
ROOT-APP-NPM-CVE-2024-21534 CVE-2024-21534 in jsonpath-plus - Patched by Root
Root has patched CVE-2024-21534 in the jsonpath-plus package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-1302 CVE-2025-1302 in jsonpath-plus - Patched by Root
Root has patched CVE-2025-1302 in the jsonpath-plus package for Root:npm. Multiple fixed versions available...
WordPress Simple Restrict plugin < 1.2.9 - Contributor+ Restricted Content Disclosure vulnerability
Contributor+ Restricted Content Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Simple Restrict versions 1.2.9...
WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Featured Video Plus versions = 2.3.3...
WordPress Football Pool plugin <= 2.13.4 - Authenticated (Subscriber+) Reflected Cross-Site Scripting vulnerability
Authenticated Subscriber+ Reflected Cross-Site Scripting vulnerability discovered by whitesector in WordPress Plugin Football Pool versions = 2.13.4...
MAL-2026-12812 Malicious code in ts-toolkit-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d47be3f5dc16ea70755e0233f46106d3f50d1d5384a4f20c76b91463c9876c The package's main entry defines a getPlugin function that performs an HTTPS request to a hardcoded bare-IP endpoint at 31.97.137.157:45000/icons/112...
Malicious code in ts-toolkit-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d47be3f5dc16ea70755e0233f46106d3f50d1d5384a4f20c76b91463c9876c The package's main entry defines a getPlugin function that performs an HTTPS request to a hardcoded bare-IP endpoint at 31.97.137.157:45000/icons/112...
WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by kai63001 in WordPress Plugin Dokan versions = 5.0.2...
Malicious code in chai-assertions-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a83cd9353779d12538e8c6b06276178f6f0c246abd7d5148ce805536cbf57f The package is published as a Chai assertions extension, but the shipped code in index.js and lib/ is unrelated Pino logger source used as filler...
[SECURITY] Fedora 43 Update: open62541-1.5.6-1.fc43
open62541 is a C-based library linking with C++ projects is possible with all necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications...
WordPress DTX – Dynamic Text Extension for Contact Form 7 plugin <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability
Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by SATYARTH PRAKASH XoxoL33t in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 5.0.5...
CLSA-2026-1780966312 TuxCare security update for jsonpath-plus (2 CVEs)
TuxCare rebuilt jsonpath-plus to address 2 CVEs. Fixed in 6.0.1-tuxcare.1...
CLSA-2026-1780966310 TuxCare security update for jsonpath-plus (2 CVEs)
TuxCare rebuilt jsonpath-plus to address 2 CVEs. Fixed in 5.1.0-tuxcare.1...