93 matches found
Malicious code in precise_felidae_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ceae00b5fc60c298c3ffbad4e64505829b3dbd35a9ac38f0adbd955f99cce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89461
Malicious code in preciseturtlez3n npm...
EUVD-2025-75984
Malicious code in precisegazelle-silentdev npm...
EUVD-2025-80910
Malicious code in preciseloondumbs npm...
EUVD-2025-60941
The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...
EUVD-2025-67759
Malicious code in precisemulez3n npm...
CVE-2025-11869
The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...
CVE-2025-11869 Precise Columns <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...
CVE-2025-11869 Precise Columns <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...
CVE-2025-11869
CVE-2025-11869 : The WordPress plugin Precise Columns (versions
EUVD-2025-52682
Malicious code in precise-aquamarine-earwig npm...
EUVD-2025-52681
Malicious code in precise-gray-cattle npm...
EUVD-2025-52679
Malicious code in precise-silver-lemming npm...
EUVD-2025-52680
Malicious code in precise-rose-fly npm...
MAL-2025-69967 Malicious code in precise-aquamarine-earwig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c950221c428cb238fb48fa047f1bdd600d20f54b13c555e3374573003ac7343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-57832
Malicious code in precisecougarz3n npm...
CVE-2025-11869: Improper Neutralization of Input During Web Page Generation
The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...
WordPress plugin Precise Columns 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-46259
Name of the Vulnerable Software and Affected Versions Precise Columns versions prior to 1.1 Description The Precise Columns plugin for WordPress is susceptible to Stored Cross-Site Scripting through the wrap id shortcode attribute. The plugin does not properly sanitize user input or escape output...
WordPress Precise Columns plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Precise Columns versions = 1.0...