Malicious code in simple-js-sha3 (npm)

The package simple-js-sha3 was found to contain malicious code...

MAL-2025-9282 Malicious code in @scdb/simple-http (npm)

The package @scdb/simple-http was found to contain malicious code...

MAL-2025-33272 Malicious code in simple-js-shake (npm)

The package simple-js-shake was found to contain malicious code...

MAL-2025-33275 Malicious code in simple-month-calendar (npm)

The package simple-month-calendar was found to contain malicious code...

MAL-2025-33266 Malicious code in simple-console-logger-20231399-hyunmin (npm)

The package simple-console-logger-20231399-hyunmin was found to contain malicious code...

MAL-2025-9588 Malicious code in @utilcode/simple-http (npm)

The package @utilcode/simple-http was found to contain malicious code...

MAL-2025-33269 Malicious code in simple-js-sha3-256 (npm)

The package simple-js-sha3-256 was found to contain malicious code...

MAL-2025-25505 Malicious code in lodash-simple (npm)

The package lodash-simple was found to contain malicious code...

MAL-2025-13914 Malicious code in a-simple-cache (npm)

The package a-simple-cache was found to contain malicious code...

MAL-2025-33271 Malicious code in simple-js-sha3-512 (npm)

The package simple-js-sha3-512 was found to contain malicious code...

Malicious code in simple-js-shake-256 (npm)

The package simple-js-shake-256 was found to contain malicious code...

Malicious code in simple-js-shake-128 (npm)

The package simple-js-shake-128 was found to contain malicious code...

Malicious code in simple-js-sha3-512 (npm)

The package simple-js-sha3-512 was found to contain malicious code...

CVE-2025-49044

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

CVE-2025-49044 WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

CVE-2025-49044 WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

CVE-2025-49044

CVE-2025-49044 is a CSRF-to-Stored XSS vulnerability in the WordPress Simple Poll plugin prior to or up to version 1.1.1. The issue affects Simple Poll by Tosend.it and is documented with CVSS v3.1 base score 7.1 (HIGH) with network attack vector, low attack complexity, no privileges required, us...

WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by TAKERU OTSUKA Patchstack Alliance in WordPress Plugin Simple Poll versions = 1.1.1...

CVE-2025-8482

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of data in version 2.8.4. This is due to a missing capability check on the migratefromwpuseravatar function. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2025-8690

The Simple Responsive Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inje...