Malicious code in gatsby-eui-starter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-662 Malicious code in gatsby-eui-starter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-24568

Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force Starter Templates astra-sites allows Cross Site Request Forgery.This issue affects Starter Templates: from n/a through = 4.4.9...

CVE-2025-24568 WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force Starter Templates astra-sites allows Cross Site Request Forgery.This issue affects Starter Templates: from n/a through = 4.4.9...

CVE-2025-24568 WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force Starter Templates astra-sites allows Cross Site Request Forgery.This issue affects Starter Templates: from n/a through = 4.4.9...

CVE-2025-24568

CVE-2025-24568 is a CSRF vulnerability affecting the Brainstorm Force Starter Templates plugin for WordPress, reported for versions up to 4.4.9. The NVD entry and PatchStack reference confirm the issue and CVSS v3.1 characteristics: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N, base score 4.3 (Medium). Th...

WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Starter Templates versions = 4.4.9...

WordPress plugin Starter Templates 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-5409 · Brainstorm Force · Brainstorm Force Starter Templates

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Starter Templates versions 4.4.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations:...

Malicious code in packs-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f277f0e30c3047df016449f4c4f177cc9201318817736f3871eb938d0f24cfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canva-connect-api-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b678e20c1bba076695f221d78bccaa03e07883cd72690dcb6bf357845c03d3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bc-nuxt-vue-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a07ad7d45dd2f1165c59df4d8cd0fae05829dcca27e3804324adb715d3cf966d The OpenSSF Package Analysis project identified 'bc-nuxt-vue-starter' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in staticdocs-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee97e5deede91d6b3795e1f880911a876984e961436170da9d7ad6db5513cf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11054 Malicious code in nft-dapp-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b97b6a233f40dca2413760c7d1f9a8cafb4a0ed8099ab831ebbe6e8a0fba6ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rockwell Automation多款产品 安全漏洞

Rockwell Automation RSLogix 500 and others are products of Rockwell Automation, a U.S. company.Rockwell Automation RSLogix 500 is a suite of programming software for industrial control systems.Rockwell Automation Rockwell Automation RSLogix Micro Developer and Starter is an industrial control...

Malicious code in ts-jest-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c8f8d1bb529584dca1e5c310895c30958385530f5241f3a8a364caffb33347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9278 Malicious code in ts-jest-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c8f8d1bb529584dca1e5c310895c30958385530f5241f3a8a364caffb33347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-47345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Starter Templates astra-sites allows Stored XSS.This issue affects Starter Templates: from n/a through = 4.4.0...

WordPress plugin Starter Templates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Spice Starter Sites plugin <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import vulnerability

Missing Authorization to Unauthenticated Demo Content Import vulnerability discovered by Lucio Sá in WordPress Plugin Spice Starter Sites versions = 1.2.5...