PT-2025-46802

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...

CVE-2025-64267: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...

WordPress plugin WP Import – Ultimate CSV XML Importer for WordPress 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin WP...

CVE-2025-12732: Exposure of Sensitive Information to an Unauthorized Actor

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...

EUVD-2025-101352

Malicious code in ultimatelizardz3n npm...

EUVD-2025-94525

Malicious code in ultimatecricketz3n npm...

EUVD-2025-94524

Malicious code in ultimateemuz3n npm...

EUVD-2025-94523

Malicious code in ultimateiguanaz3n npm...

EUVD-2025-94522

Malicious code in ultimatemeadowlarkz3n npm...

MAL-2025-123777 Malicious code in ultimate_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5a297a4f0306c76da96f2e461569e8f8d282fba764b29af8ed2b92c01fcfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultimate_grasshopper-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500bed395e99dfe38d3f510a62552907f53f757663bc2bd47850c494cb083590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75376

Malicious code in ultimatecrawdad-appteadev npm...

EUVD-2025-83871

Malicious code in ultimatesparrowz3n npm...

EUVD-2025-73212

Malicious code in ultimatebobcatz3n npm...

EUVD-2025-73211

Malicious code in ultimatechickadeez3n npm...

EUVD-2025-73210

Malicious code in ultimateorcaz3n npm...

EUVD-2025-73209

Malicious code in ultimatestingrayz3n npm...

MAL-2025-97079 Malicious code in ultimate_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf817aa941d76ad0635b84833e9e7fb6cec4739eed6332c52fddbf5a4f46aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65823

Malicious code in ultimategiraffez3n npm...

MAL-2025-81857 Malicious code in ultimate_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d6dc5f59f97deaea526c73cdbc1afc47629f4facbd1c5dda983275f2df4aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...