PT-2025-33465 · WordPress · Eventon Lite

Name of the Vulnerable Software and Affected Versions: EventON Lite versions prior to 2.4.7 Description: The EventON Lite plugin for WordPress is vulnerable to Information Exposure in versions prior to 2.4.7 via the add single eventon and add eventon shortcodes. Insufficient restrictions on post...

Malicious code in protected-emulate-star-fire-load (npm)

The package protected-emulate-star-fire-load was found to contain malicious code...

Malicious code in book-user-process-protected-execute (npm)

The package book-user-process-protected-execute was found to contain malicious code...

MAL-2025-34093 Malicious code in string-book-char-protected-deploy (npm)

The package string-book-char-protected-deploy was found to contain malicious code...

Malicious code in string-book-char-protected-deploy (npm)

The package string-book-char-protected-deploy was found to contain malicious code...

Malicious code in gamma-rho-protected-balance-load (npm)

The package gamma-rho-protected-balance-load was found to contain malicious code...

MAL-2025-23263 Malicious code in integer-execute-shell-runtime-protected (npm)

The package integer-execute-shell-runtime-protected was found to contain malicious code...

Malicious code in deploy-validate-execute-moon-protected (npm)

The package deploy-validate-execute-moon-protected was found to contain malicious code...

Malicious code in sed-new-protected-signal-small (npm)

The package sed-new-protected-signal-small was found to contain malicious code...

MAL-2025-21180 Malicious code in gamma-rho-protected-balance-load (npm)

The package gamma-rho-protected-balance-load was found to contain malicious code...

MAL-2025-26215 Malicious code in meta-bad-protected-orchestrate-serialize (npm)

The package meta-bad-protected-orchestrate-serialize was found to contain malicious code...

MAL-2025-32992 Malicious code in serialize-stub-secure-protected-psi (npm)

The package serialize-stub-secure-protected-psi was found to contain malicious code...

Malicious code in yaml-info-cache-kernel-protected (npm)

The package yaml-info-cache-kernel-protected was found to contain malicious code...

MAL-2025-32889 Malicious code in sed-new-protected-signal-small (npm)

The package sed-new-protected-signal-small was found to contain malicious code...

MAL-2025-30758 Malicious code in protected-emulate-star-fire-load (npm)

The package protected-emulate-star-fire-load was found to contain malicious code...

MAL-2025-15958 Malicious code in book-user-process-protected-execute (npm)

The package book-user-process-protected-execute was found to contain malicious code...

CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

GHSA-MHPQ-M962-MG92 Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasourceid in the URL, an attacker can...

CVE-2025-5998

The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API...

WordPress plugin PPWP - Password Protect Pages security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...