CVE-2025-12468 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.4.1 via the '/wc-coupons/' REST API endpoint. This is due to the endpoint being marked as a...

PT-2025-45100

Name of the Vulnerable Software and Affected Versions FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce versions up to and including 3.6.4.1 Description The software contains a flaw that allows unauthenticated attackers to extract sensitive data, including...

EUVD-2025-37244

Malicious code in web3-wc npm...

Malicious code in web3-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c652a3b11d35f64a6e471fa1fadb5523c045ce3708e327d390c5cee28941a The package web3-wc was found to contain malicious code. Source: ghsa-malware f5ac56c88955ce71a2cb673c8d49d38f9e97e6af8e0f9a60969d0fd3d511586e Any...

Malicious Package

Overview web3-wc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-49274 Malicious code in web3-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c652a3b11d35f64a6e471fa1fadb5523c045ce3708e327d390c5cee28941a The package web3-wc was found to contain malicious code. Source: ghsa-malware f5ac56c88955ce71a2cb673c8d49d38f9e97e6af8e0f9a60969d0fd3d511586e Any...

CVE-2025-62957

Cross-Site Request Forgery CSRF vulnerability in NikanWP NikanWP WooCommerce Reporting wc-reports-lite allows Stored XSS.This issue affects NikanWP WooCommerce Reporting: from n/a through = 1.0.0...

PT-2025-43831

Cross-Site Request Forgery CSRF vulnerability in NikanWP NikanWP WooCommerce Reporting wc-reports-lite allows Stored XSS.This issue affects NikanWP WooCommerce Reporting: from n/a through = 1.0.0...

CVE-2025-59004

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pco58 WC Return products wc-return-product allows Reflected XSS.This issue affects WC Return products: from n/a through = 1.5...

CVE-2025-59004

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pco58 WC Return products wc-return-product allows Reflected XSS.This issue affects WC Return products: from n/a through = 1.5...

CVE-2025-59004 WordPress WC Return products plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pco58 WC Return products wc-return-product allows Reflected XSS.This issue affects WC Return products: from n/a through = 1.5...

PT-2025-43283

Name of the Vulnerable Software and Affected Versions pco 58 WC Return products versions through 1.5 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of...

EUVD-2025-17538

Malicious code in bioql PyPI...

EUVD-2023-50453

Malicious code in bioql PyPI...

EUVD-2025-3898

Malicious code in bioql PyPI...

EUVD-2025-7720

Malicious code in bioql PyPI...

EUVD-2024-35445

Malicious code in bioql PyPI...

EUVD-2025-3228

Malicious code in bioql PyPI...

EUVD-2024-29200

Malicious code in bioql PyPI...

EUVD-2025-17284

Malicious code in bioql PyPI...