Malicious code in server-cybernetics-spinner-init (npm)

The package server-cybernetics-spinner-init was found to contain malicious code...

Malicious code in repository-semantic-ui-spinner-barnard (npm)

The package repository-semantic-ui-spinner-barnard was found to contain malicious code...

Malicious code in exobiology-axios-cryovolcano-spinner (npm)

The package exobiology-axios-cryovolcano-spinner was found to contain malicious code...

Malicious code in nextjs-cosmos-spinner-auth0 (npm)

The package nextjs-cosmos-spinner-auth0 was found to contain malicious code...

Malicious code in spinner-neptunology-selenology-cosmology (npm)

The package spinner-neptunology-selenology-cosmology was found to contain malicious code...

Malicious code in spawn-spinner-stop-callisto (npm)

The package spawn-spinner-stop-callisto was found to contain malicious code...

MAL-2025-21999 Malicious code in grunt-spinner-janus-tool (npm)

The package grunt-spinner-janus-tool was found to contain malicious code...

MAL-2025-21247 Malicious code in geckodriver-link-vortex-spinner (npm)

The package geckodriver-link-vortex-spinner was found to contain malicious code...

CVE-2025-46500

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Reflected XSS.This issue affects Wordpress Auto Spinner: from n/a through = 3.26.0...

CVE-2025-46500

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Reflected XSS.This issue affects Wordpress Auto Spinner: from n/a through = 3.26.0...

CVE-2025-46500 WordPress Wordpress Auto Spinner plugin <= 3.26.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Reflected XSS.This issue affects Wordpress Auto Spinner: from n/a through = 3.26.0...

CVE-2025-46500 WordPress Wordpress Auto Spinner plugin <= 3.25.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ValvePress Wordpress Auto Spinner allows Reflected XSS. This issue affects Wordpress Auto Spinner: from n/a through 3.25.0...

PT-2025-29796 · WordPress · Valvepress Wordpress Auto Spinner

Name of the Vulnerable Software and Affected Versions: ValvePress Wordpress Auto Spinner versions through 3.25.0 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update ValvePress...

WordPress plugin Auto Spinner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Wordpress Auto Spinner plugin <= 3.26.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Anhchangmutrang in WordPress Plugin Wordpress Auto Spinner versions = 3.26.0...

Malicious code in @etech-flex-sre/ls-loading-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487c2e88510b861b61f2ca278f6341fe808b6113fc956f64320585b8e83ca3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-47534

Missing Authorization vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordpress Auto Spinner: from n/a through = 3.25.0...

CVE-2025-47534

Missing Authorization vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordpress Auto Spinner: from n/a through = 3.25.0...

CVE-2025-47534

CVE-2025-47534 relates to a Missing Authorization vulnerability in the WordPress plugin “Wordpress Auto Spinner” (ValvePress) affecting versions up to and including 3.25.0. The connected sources confirm a broken access control issue that could allow exploitation due to incorrectly configured acce...

CVE-2025-47534 WordPress Wordpress Auto Spinner plugin <= 3.25.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordpress Auto Spinner: from n/a through = 3.25.0...