5220 matches found
WordPress plugin Ultimate Member Widgets for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...
CVE-2025-13145: Deserialization of Untrusted Data
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.33.1. This is due to deserialization of untrusted data supplied via CSV file imports in the importsinglepostascsv function within...
WordPress WP Import – Ultimate CSV XML Importer for WordPress plugin <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Import vulnerability
Authenticated Administrator+ PHP Object Injection via CSV Import vulnerability discovered by WordFence in WordPress Plugin WP Ultimate CSV Importer versions = 7.33.1...
EUVD-2025-163779
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...
CVE-2025-64267 WordPress WooCommerce Ultimate Points And Rewards plugin <= 2.10.2 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...
CVE-2025-64267: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...
PT-2025-46802
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...
CVE-2025-12732: Exposure of Sensitive Information to an Unauthorized Actor
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...
WordPress plugin WP Import – Ultimate CSV XML Importer for WordPress 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin WP...
EUVD-2025-101352
Malicious code in ultimatelizardz3n npm...
EUVD-2025-94525
Malicious code in ultimatecricketz3n npm...
EUVD-2025-94523
Malicious code in ultimateiguanaz3n npm...
EUVD-2025-94524
Malicious code in ultimateemuz3n npm...
EUVD-2025-94522
Malicious code in ultimatemeadowlarkz3n npm...
MAL-2025-123777 Malicious code in ultimate_iguana_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5a297a4f0306c76da96f2e461569e8f8d282fba764b29af8ed2b92c01fcfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ultimate_grasshopper-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500bed395e99dfe38d3f510a62552907f53f757663bc2bd47850c494cb083590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75376
Malicious code in ultimatecrawdad-appteadev npm...
EUVD-2025-83871
Malicious code in ultimatesparrowz3n npm...