965 matches found
PT-2025-51197
The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpr addons upload file action...
WordPress Royal Elementor Addons plugin <= 1.7.1031 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Royal Elementor Addons versions = 1.7.1031...
CVE-2025-6251
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via $item'fieldid' in all versions up to, and including, 1.7.1036 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-6251 Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via $item'fieldid' in all versions up to, and including, 1.7.1036 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-6251
CVE-2025-6251 affects Royal Elementor Addons and Templates for WordPress. The issue is stored cross-site scripting via $item['field_id'] in all versions up to 1.7.1036, triggered by insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor leve...
CVE-2025-6251 Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via $item'fieldid' in all versions up to, and including, 1.7.1036 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress plugin Royal Elementor Addons and Templates 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...
PT-2025-47425
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via $item'field id' in all versions up to, and including, 1.7.1036 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress Royal Elementor Addons and Templates plugin <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Royal Elementor Addons versions = 1.7.1036...
EUVD-2025-117115
Malicious code in royal-turquoise-crocodile npm...
MAL-2025-138987 Malicious code in royal-turquoise-crocodile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6807c8de7271a95357be7c721520fca20952d774e11852cccd1a10c20c13f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117116
Malicious code in royal-beige-dingo npm...
Malicious code in royal_bedbug_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f3ca1de7ff7d244e12e2ee08225e822acfffe570c3ea63258bc13b2236b847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in royal_ocelot_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b8e16e5eea28e1f4b4259a7eacb1d4ebcf8ada0a88fad115793726f0a6a692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-95253
Malicious code in royalturkeyz3n npm...
Malicious code in royal_toad_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2d52c050a4ccad2adb2d7fc792ce9a372f0481b271a0bea1688fbe73b84ffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89007
Malicious code in royaltoadz3n npm...
Malicious code in royal_eagle_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc60cb692bb3ab80de0181cab30795a9e91e2dd8fee8786419e54425a16f4c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...