EUVD-2025-73210

Malicious code in ultimateorcaz3n npm...

EUVD-2025-73212

Malicious code in ultimatebobcatz3n npm...

EUVD-2025-65823

Malicious code in ultimategiraffez3n npm...

MAL-2025-81857 Malicious code in ultimate_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d6dc5f59f97deaea526c73cdbc1afc47629f4facbd1c5dda983275f2df4aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51433

Malicious code in ultimate-ivory-gazelle npm...

EUVD-2025-51435

Malicious code in ultimate-crimson-tahr npm...

EUVD-2025-51434

Malicious code in ultimate-green-buzzard npm...

MAL-2025-71215 Malicious code in ultimate-green-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066c285b3fcb8bdb22ccf2a7eb06ac076a77684dfdc7b86edba20bfe767eb36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51436

Malicious code in ultimate-copper-quelea npm...

EUVD-2025-49161

Malicious code in ultimateharez3n npm...

EUVD-2025-49162

Malicious code in ultimateflyingfishz3n npm...

EUVD-2025-49160

Malicious code in ultimateharrierz3n npm...

WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Ultimate FAQ versions = 2.4.3...

WordPress plugin多款产品 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

PT-2025-44794

Name of the Vulnerable Software and Affected Versions FairSketch Rise Ultimate Project Manager & CRM version 3.9.4 Description A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization. This is due to missing authorization chec...

Ultimate Fosters UltimatePOS 安全漏洞

Ultimate Fosters UltimatePOS is a product management and POS cashiering system from Ultimate Fosters. A security vulnerability exists in Ultimate Fosters UltimatePOS version 4.8, which stems from the input submitted by the purchase function in the administration interface is not properly escaped ...

FairSketch Rise Ultimate Project Manager and CRM 安全漏洞

FairSketch Rise Ultimate Project Manager and CRM is a team management and customer relationship management system from FairSketch. A security vulnerability exists in FairSketch Rise Ultimate Project Manager and CRM version 3.9.4, which stems from a lack of authorization checking in the ticket...

CVE-2025-48088

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BrainstormForce Ultimate Addons for WPBakery Page Builder ultimatevcaddons allows Stored XSS.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.21.1...

EUVD-2025-36063

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows Stored XSS.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a before 3.21.1...

CVE-2025-48088

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BrainstormForce Ultimate Addons for WPBakery Page Builder ultimatevcaddons allows Stored XSS.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.21.1...