29525 matches found
CVE-2025-8680
CVE-2025-8680 concerns the WordPress plugin “B Slider – Gutenberg Slider Block for WP” where the vulnerability is a Server-Side Request Forgery (SSRF) in the fs_api_request function. The flaw affects versions up to and including 2.0.0 and requires authentication with at least subscriber-level pri...
CVE-2025-8680 B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version less than, or equal to, 2.0.0 via the fsapirequest function. This makes it possible for authenticated attackers, with subscriber-level access and above to make web requests to...
WordPress WPExperts Post SMTP plugin authentication bypass vulnerability
WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...
Malicious code in microsoft.azure.cognitiveservices.search.visualsearch (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in baker-services (npm)
The package baker-services was found to contain malicious code...
Malicious code in changed-services (npm)
The package changed-services was found to contain malicious code...
Malicious code in data-solutions-framework-on-aws (npm)
The package data-solutions-framework-on-aws was found to contain malicious code...
sutter-rdd-authentication (>=0.1.0, <=0.2.1) potentially affected by unknown CVE via sutter-rdd-services (0.0.1-security)
sutter-rdd-services NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on sutter-rdd-services and may be impacted: - sutter-rdd-authentication =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34247...
Malicious code in sutter-rdd-services (npm)
The package sutter-rdd-services was found to contain malicious code...
Malicious code in cocha-logger-services (npm)
The package cocha-logger-services was found to contain malicious code...
Malicious code in uxc-ng2-services (npm)
The package uxc-ng2-services was found to contain malicious code...
Malicious code in applications.services.devcloud.image-search-client (npm)
The package applications.services.devcloud.image-search-client was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-14727 Malicious code in applications.services.devcloud.image-search-client (npm)
The package applications.services.devcloud.image-search-client was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-34247 Malicious code in sutter-rdd-services (npm)
The package sutter-rdd-services was found to contain malicious code...
MAL-2025-34766 Malicious code in test-aws-xray-sdk-express (npm)
The package test-aws-xray-sdk-express was found to contain malicious code...
MAL-2025-15232 Malicious code in aws-xray-sdk-node (npm)
The package aws-xray-sdk-node was found to contain malicious code...
MAL-2025-20326 Malicious code in fcn-gin-services (npm)
The package fcn-gin-services was found to contain malicious code...
MAL-2025-16782 Malicious code in changed-services (npm)
The package changed-services was found to contain malicious code...