WordPress Essential Doo Components for Visual Composer plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Essential Doo Components for Visual Composer versions = 1.9...

Linux Distros Unpatched Vulnerability : CVE-2024-43499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-43499 Note that Nessus relies on the presence of the package as reported by the vendor...

Adversarial Attacks on VQA-NLE: Exposing and Alleviating Inconsistencies in Visual Question Answering Explanations

Natural language explanations in visual question answering VQA-NLE aim to make black-box models more transparent by elucidating their decision-making processes. However, we find that existing VQA-NLE systems can produce inconsistent explanations and reach conclusions without genuinely understandi...

CVE-2025-55709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45.15.0...

CVE-2025-52712

Path Traversal: '.../...//' vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Path Traversal.This issue affects Post and Page Builder by BoldGrid: from n/a through = 1.27.8...

CVE-2025-55709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45.15.0...

MAL-2025-6942 Malicious code in microsoft.azure.cognitiveservices.search.visualsearch (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in microsoft.azure.cognitiveservices.search.visualsearch (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in wm-visual-composer-types (npm)

The package wm-visual-composer-types was found to contain malicious code...

MAL-2025-39378 Malicious code in wm-visual-composer-types (npm)

The package wm-visual-composer-types was found to contain malicious code...

MAL-2025-38651 Malicious code in vscode-extend (npm)

The package vscode-extend was found to contain malicious code...

MAL-2025-38653 Malicious code in vscode-mssql (npm)

The package vscode-mssql was found to contain malicious code...

MAL-2025-23347 Malicious code in ips-visual-parse (npm)

The package ips-visual-parse was found to contain malicious code...

Malicious code in ips-visual-parse (npm)

The package ips-visual-parse was found to contain malicious code...

MAL-2025-15225 Malicious code in aws-core-vscode (npm)

The package aws-core-vscode was found to contain malicious code...

MAL-2025-38656 Malicious code in vscode.markdown-it-renderer (npm)

The package vscode.markdown-it-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 2822922f8dca5f68d170c921999dd1e45b4dd8b470e088d9aadbe5806cc2069b This package installs a dependency hosted on a custom domain...

CVE-2025-53773

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally...

CVE-2025-55709 WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45.15.0...

CVE-2025-55709 WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through n/a...

CVE-2025-55709

CVE-2025-55709 is a storage XSS flaw in the Visual Composer Website Builder plugin. The vulnerability arises from improper input neutralization during web page generation, enabling stored XSS in the affected plugin. Evidence from multiple sources indicates the vulnerability affects the Visual Com...