PT-2025-33423 · Linlinjava · Litemall

Name of the Vulnerable Software and Affected Versions: linlinjava litemall versions up to 1.8.0 Description: A vulnerability was identified in linlinjava litemall. The issue affects an unknown functionality within the /admin/config/express file of the Business Logic Handler component. Manipulatio...

PT-2025-33479 · Unknown · Reel Sektör Hazine Ve Risk Yönetimi Yazılımı

Name of the Vulnerable Software and Affected Versions: Reel Sektör Hazine ve Risk Yönetimi Yazılımı versions through 1.0.0.4 Description: Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability exists in Reel Sektör Hazine ve Risk Yönetimi Yazılımı, allowi...

CVE-2025-49573

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-52767

Cross-Site Request Forgery CSRF vulnerability in lisensee NetInsight Analytics Implementation Plugin netinsight-analytics-implementation-plugin allows Cross Site Request Forgery.This issue affects NetInsight Analytics Implementation Plugin: from n/a through = 1.0.3...

Malicious code in @zalastax/nolb-react-up (npm)

The package @zalastax/nolb-react-up was found to contain malicious code...

Malicious code in @zalastax/nolb-_up (npm)

The package @zalastax/nolb-up was found to contain malicious code...

Malicious code in down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb (npm)

The package down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb was found to contain malicious code...

MAL-2025-37183 Malicious code in trello-power-up-tutorial-part-one (npm)

The package trello-power-up-tutorial-part-one was found to contain malicious code...

MAL-2025-18695 Malicious code in down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb (npm)

The package down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb was found to contain malicious code...

MAL-2025-13838 Malicious code in @zalastax/nolb-react-up (npm)

The package @zalastax/nolb-react-up was found to contain malicious code...

Malicious code in up-tsu (npm)

The package up-tsu was found to contain malicious code...

Malicious code in trello-power-up-tutorial-part-one (npm)

The package trello-power-up-tutorial-part-one was found to contain malicious code...

MAL-2025-37894 Malicious code in up-tsu (npm)

The package up-tsu was found to contain malicious code...

MAL-2025-10547 Malicious code in @zalastax/nolb-_up (npm)

The package @zalastax/nolb-up was found to contain malicious code...

CVE-2025-53219

CVE-2025-53219 is a CSRF vulnerability in WordPress WP-Database-Optimizer-Tools (versions up to 0.2). The issue allows Cross Site Request Forgery by authenticated users; impact is described as I: LOW, A: LOW, with UI interaction required and network/low complexity. The affected plugin is WP-Datab...

CVE-2025-53241 WordPress Simplified plugin <= 1.0.11 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in kodeshpa Simplified simplified allows Server Side Request Forgery.This issue affects Simplified: from n/a through = 1.0.11...

CVE-2025-53587 WordPress Findgo Theme <= 1.3.57 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ApusTheme Findgo findgo allows Cross Site Request Forgery.This issue affects Findgo: from n/a through = 1.3.57...

CVE-2025-54054 WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: from n/a through = 3.18.3...

CVE-2025-54712 WordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Elementor Addons: from n/a through = 2.2.7...

CVE-2025-54715 WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...