CVE-2025-61680

CVE-2025-61680 concerns Minecraft RCON Terminal, a VS Code extension used for Minecraft server management. Versions 0.1.0–2.0.6 store passwords via VS Code's Configuration API, which writes to settings.json in plaintext. The underlying issue is plaintext password storage through the configuration...

PT-2025-10055

Name of the Vulnerable Software and Affected Versions CS Framework plugin for WordPress versions prior to 6.9 Description The issue allows authenticated attackers with subscriber-level access and above to read the contents of arbitrary files on the server, potentially containing sensitive...

PT-2021-5210

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description The issue is related to incorrect code generation management in the settings.json file of Microsoft Visual Studio Code, allowing an attacker to execute arbitrary code...