93 matches found
WordPress Ocean eComm Treasure Box plugin <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Alex Thomas, Wordfence Argus in WordPress Plugin Ocean eComm Treasure Box versions = 1.8.0...
CVE-2026-81929
The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...
CVE-2026-81929 Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter
The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...
CVE-2026-81929
The Ocean Pro Demos (versions up to and including 1.5.4 ) and Ocean eComm Treasure Box (versions up to and including 1.8.0 ) WordPress plugins are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient authorization, input sanitization, and output escaping within the Pop...
EUVD-2026-95509
The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...
CVE-2026-81929: Improper Neutralization of Input During Web Page Generation
The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...
MAL-2025-119075 Malicious code in cici-buburayam12-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a571ebbc10cb8eac33e5ea3830e982cca7baac4b211fd217c2c118d757108be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2021-33528
Malicious code in bioql PyPI...
EUVD-2025-23339
Malicious code in bioql PyPI...
EUVD-2025-23472
Malicious code in bioql PyPI...
EUVD-2021-33529
Malicious code in bioql PyPI...
MAL-2025-37176 Malicious code in treasure-yarn-wea438-project (npm)
The package treasure-yarn-wea438-project was found to contain malicious code...
Malicious code in flame-treasure-nsk229-project (npm)
The package flame-treasure-nsk229-project was found to contain malicious code...
MAL-2025-20664 Malicious code in flame-treasure-nsk229-project (npm)
The package flame-treasure-nsk229-project was found to contain malicious code...
Malicious code in treasure-yarn-wea438-project (npm)
The package treasure-yarn-wea438-project was found to contain malicious code...
CVE-2025-8504
A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-8437
A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-8504
A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-8504
A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-8504 code-projects Kitchen Treasure userregistration.php unrestricted upload
A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...