Lucene search
+L

93 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/11 8:11 p.m.•10 views

Malicious code in precise_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ceae00b5fc60c298c3ffbad4e64505829b3dbd35a9ac38f0adbd955f99cce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 3:19 p.m.•8 views

EUVD-2025-89461

Malicious code in preciseturtlez3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 7:44 a.m.•8 views

EUVD-2025-75984

Malicious code in precisegazelle-silentdev npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 7:26 a.m.•9 views

EUVD-2025-80910

Malicious code in preciseloondumbs npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 6:30 a.m.•10 views

EUVD-2025-60941

The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...

6.4CVSS4.6AI score0.0018EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/11 4:25 a.m.•8 views

EUVD-2025-67759

Malicious code in precisemulez3n npm...

6.6AI score
SaveExploits0
NVD
NVD
•added 2025/11/11 4:15 a.m.•15 views

CVE-2025-11869

The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...

6.4CVSS0.0018EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/11 3:30 a.m.•5 views

CVE-2025-11869 Precise Columns <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...

6.4CVSS6.1AI score0.0018EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/11 3:30 a.m.•27 views

CVE-2025-11869 Precise Columns <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...

6.4CVSS0.0018EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/11 3:30 a.m.•26 views

CVE-2025-11869

CVE-2025-11869 : The WordPress plugin Precise Columns (versions

6.4CVSS6.1AI score0.0018EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/11/11 12:41 a.m.•7 views

EUVD-2025-52682

Malicious code in precise-aquamarine-earwig npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 12:41 a.m.•5 views

EUVD-2025-52681

Malicious code in precise-gray-cattle npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 12:41 a.m.•6 views

EUVD-2025-52679

Malicious code in precise-silver-lemming npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 12:41 a.m.•7 views

EUVD-2025-52680

Malicious code in precise-rose-fly npm...

6.6AI score
SaveExploits0
OSV
OSV
•added 2025/11/11 12:41 a.m.•6 views

MAL-2025-69967 Malicious code in precise-aquamarine-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c950221c428cb238fb48fa047f1bdd600d20f54b13c555e3374573003ac7343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 12:17 a.m.•5 views

EUVD-2025-57832

Malicious code in precisecougarz3n npm...

6.6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•2 views

CVE-2025-11869: Improper Neutralization of Input During Web Page Generation

The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapid shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML...

6.4CVSS6AI score0.0018EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•14 views

WordPress plugin Precise Columns 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•13 views

PT-2025-46259

Name of the Vulnerable Software and Affected Versions Precise Columns versions prior to 1.1 Description The Precise Columns plugin for WordPress is susceptible to Stored Cross-Site Scripting through the wrap id shortcode attribute. The plugin does not properly sanitize user input or escape output...

6.4CVSS5.2AI score0.0018EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/11/10 11:54 p.m.•13 views

WordPress Precise Columns plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Precise Columns versions = 1.0...

6.4CVSS5.8AI score0.0018EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder