3918 matches found
WordPress Image Hover Effects Ultimate plugin <= 9.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Image Hover Effects Ultimate versions = 9.10.5...
WordPress plugin Ultimate Member Widgets for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...
PT-2025-47555
The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle filter users function in all versions up to, and including, 2.3. This makes it possible for unauthenticated...
WordPress WP Import – Ultimate CSV XML Importer for WordPress plugin <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Import vulnerability
Authenticated Administrator+ PHP Object Injection via CSV Import vulnerability discovered by WordFence in WordPress Plugin WP Ultimate CSV Importer versions = 7.33.1...
EUVD-2025-163779
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...
CVE-2025-64267 WordPress WooCommerce Ultimate Points And Rewards plugin <= 2.10.2 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...
PT-2025-46802
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through...
WordPress plugin WP Import – Ultimate CSV XML Importer for WordPress 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin WP...
EUVD-2025-101352
Malicious code in ultimatelizardz3n npm...
EUVD-2025-94523
Malicious code in ultimateiguanaz3n npm...
EUVD-2025-94524
Malicious code in ultimateemuz3n npm...
EUVD-2025-94522
Malicious code in ultimatemeadowlarkz3n npm...
MAL-2025-123777 Malicious code in ultimate_iguana_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5a297a4f0306c76da96f2e461569e8f8d282fba764b29af8ed2b92c01fcfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-94525
Malicious code in ultimatecricketz3n npm...
Malicious code in ultimate_grasshopper-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500bed395e99dfe38d3f510a62552907f53f757663bc2bd47850c494cb083590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75376
Malicious code in ultimatecrawdad-appteadev npm...
EUVD-2025-83871
Malicious code in ultimatesparrowz3n npm...
EUVD-2025-73211
Malicious code in ultimatechickadeez3n npm...
MAL-2025-97079 Malicious code in ultimate_chickadee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf817aa941d76ad0635b84833e9e7fb6cec4739eed6332c52fddbf5a4f46aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...