EUVD-2025-60930

The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

EUVD-2025-73695

Malicious code in simplecoralrequirement npm...

MAL-2025-96599 Malicious code in simple_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b18eb4395ad66014c0af7ab6e7a50530f3979c8291a46052611aeeb4c2f567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96595 Malicious code in simple_coral_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0682ea4e370678d515e6efe08a5a398a0271374562596cb953f9092ec4a37c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73692

Malicious code in simplesnakez3n npm...

EUVD-2025-73691

Malicious code in simplestarfishz3n npm...

EUVD-2025-66750

Malicious code in simplegibbonz3n npm...

EUVD-2025-66749

Malicious code in simplesparrowz3n npm...

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Seriously Simple Podcasting versions = 3.13.0...

CVE-2025-11882

The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-11882 Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

EUVD-2025-52015

Malicious code in simple-purple-koala npm...

EUVD-2025-52016

Malicious code in simple-fuchsia-stingray npm...

EUVD-2025-52013

Malicious code in simple-violet-caterpillar npm...

MAL-2025-70634 Malicious code in simple-purple-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5692a08de852c68c3a0e4375acdcf1665c25b39a9d643b0e191fda06b548f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52014

Malicious code in simple-tan-wasp npm...

MAL-2025-70636 Malicious code in simple-violet-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3844741ad185579ea95cbb35a062d22ab4ab32d7baa5e7aa6f2463a144faaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50830

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file...

EUVD-2025-57345

Malicious code in simplemarmosetz3n npm...

CVE-2025-63678

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file...