MAL-2025-51020 Malicious code in bella-bakwan85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04049980360b8ffc3f52f1e28d6bf5733a848e679d12675a048614ed98eb236e The package bella-bakwan85-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dian-mangut70-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad0655196e8ec0865d3c77030f5ab9b8a10d05bffc7a9680a4ca77a1b54e702 The package dian-mangut70-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51265 Malicious code in cici-gembus67-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d33ec249b6a6324cb85788adb761d075d6efbddb397da55e4b56f5d0ed9720 The package cici-gembus67-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50515 Malicious code in tania-telurtahu3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b101cbe0f9e64c42fef2cac69e19a83708002846d7b88acbb5a9913f14d72b7e The package tania-telurtahu3-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50068 Malicious code in cici-peyek7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7ceab41179442575431999a55ad4e89a024444c15e85050041fa57c8cae38e The package cici-peyek7-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

SUSE CVE-2016-11070

An issue was discovered in Mattermost Server before 3.1.0. It allows XSS via theme color-code values...

CVE-2025-7663 Ovatheme Events Manager <= 1.8.6 - Missing Authorization

The Ovatheme Events Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the /class-ovaem-ajax.php file in all versions up to, and including, 1.8.6. This makes it possible for unauthenticated attackers to delete ticket files,...

WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Traveler versions 3.2.6...

WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Traveler versions = 3.2.6...

CVE-2025-60198

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in dedalx Saxon - Viral Content Blog & Magazine Marketing WordPress Theme saxon allows PHP Local File Inclusion.This issue affects Saxon - Viral Content Blog & Magazine Marketing...

CVE-2025-60199

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in dedalx InHype - Blog & Magazine WordPress Theme inhype allows PHP Local File Inclusion.This issue affects InHype - Blog & Magazine WordPress Theme: from n/a through = 1.5.2...

CVE-2025-62057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through 4.2.0...

CVE-2025-62044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Theme Elements for WPBakery thegem-elements.This issue affects TheGem Theme Elements for WPBakery: from n/a through = 5.10.5.1...

CVE-2025-62053

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through 4.2.0...

CVE-2025-62018

Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through = 4.22.0...

CVE-2025-62045

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CodexThemes TheGem Theme Elements for WPBakery thegem-elements.This issue affects TheGem Theme Elements for WPBakery: from n/a through = 5.10.5.1...

CVE-2025-48090

Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through 1.5...

CVE-2025-48290

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in bslthemes Kinsley kinsley allows PHP Local File Inclusion.This issue affects Kinsley: from n/a through = 3.4.4...

CVE-2025-48089

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through 3.1.0...

WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Traveler versions 3.2.6...