MAL-2025-9588 Malicious code in @utilcode/simple-http (npm)

The package @utilcode/simple-http was found to contain malicious code...

MAL-2025-33270 Malicious code in simple-js-sha3-384 (npm)

The package simple-js-sha3-384 was found to contain malicious code...

MAL-2025-33271 Malicious code in simple-js-sha3-512 (npm)

The package simple-js-sha3-512 was found to contain malicious code...

Malicious code in simple-js-shake-128 (npm)

The package simple-js-shake-128 was found to contain malicious code...

MAL-2025-33268 Malicious code in simple-js-sha3-224 (npm)

The package simple-js-sha3-224 was found to contain malicious code...

MAL-2025-40950 Malicious code in zero-hot-long-simple-integer (npm)

The package zero-hot-long-simple-integer was found to contain malicious code...

MAL-2025-33269 Malicious code in simple-js-sha3-256 (npm)

The package simple-js-sha3-256 was found to contain malicious code...

MAL-2025-33276 Malicious code in simple-report-parse-new-object (npm)

The package simple-report-parse-new-object was found to contain malicious code...

CVE-2025-49044

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

CVE-2025-49044 WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

CVE-2025-49044

CVE-2025-49044 is a CSRF-to-Stored XSS vulnerability in the WordPress Simple Poll plugin prior to or up to version 1.1.1. The issue affects Simple Poll by Tosend.it and is documented with CVSS v3.1 base score 7.1 (HIGH) with network attack vector, low attack complexity, no privileges required, us...

CVE-2025-49044 WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by TAKERU OTSUKA Patchstack Alliance in WordPress Plugin Simple Poll versions = 1.1.1...

CVE-2025-8482

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of data in version 2.8.4. This is due to a missing capability check on the migratefromwpuseravatar function. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2025-8690

The Simple Responsive Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inje...

WordPress plugin Simple Poll has a request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-49044: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

CVE-2025-53221: Missing Authorization

Missing Authorization vulnerability in codeablepress CodeablePress codeablepress-simple-frontend-profile-picture-upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CodeablePress: from n/a through = 1.0.2...

CVE-2025-55710: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through = 3.37.2...

PT-2025-33179 · Unknown · Tosend.It Simple Poll

Name of the Vulnerable Software and Affected Versions: tosend.it Simple Poll versions through 1.1.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in tosend.it Simple Poll, which also allows Stored Cross-Site Scripting XSS. Recommendations: At the moment, there is no...