175 matches found
CVE-2025-12186 Weekly Planner <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
The Weekly Planner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...
CVE-2025-12186 Weekly Planner <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
The Weekly Planner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...
EUVD-2025-201361
The Weekly Planner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...
CVE-2025-12186
CVE-2025-12186 (Weekly Planner WordPress plugin) is a stored XSS vulnerability affecting Weekly Planner versions up to 1.0. The flaw arises from insufficient input sanitization and output escaping in admin/settings, enabling authenticated attackers with administrator-level privileges (including m...
WordPress plugin Weekly Planner 跨站脚本漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...
PT-2025-49224
The Weekly Planner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...
WordPress Weekly Planner plugin <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Ivan Cese in WordPress Plugin Weekly Planner versions = 1.0...
EUVD-2025-116992
Malicious code in weekly-salmon-fox npm...
MAL-2025-139110 Malicious code in weekly-salmon-fox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca9e3154061e65e59397c2c22e3fa9f87ba126a97e979ecede3258c4166596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100401
Malicious code in weeklywoodpeckerz3n npm...
Malicious code in weekly_alligator_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f544c2a8912f44a686518efc024966f6e46a6eb2ab44b4e69261a771e56f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100403
Malicious code in weeklyalligatorz3n npm...
MAL-2025-131288 Malicious code in weekly_alligator_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f544c2a8912f44a686518efc024966f6e46a6eb2ab44b4e69261a771e56f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-94025
Malicious code in weeklytigerz3n npm...
EUVD-2025-87832
Malicious code in weeklyearthwormz3n npm...
EUVD-2025-87833
Malicious code in weeklyduckz3n npm...
MAL-2025-118050 Malicious code in weekly_crawdad_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2931d6043f7080b50c27e4623716f3a0b116201ae813f6412ca59a2023e9566d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74086
Malicious code in weeklycardinalindigo-55 npm...
EUVD-2025-75230
Malicious code in weeklywarbler-silentdev npm...
EUVD-2025-75231
Malicious code in weeklybedbug-appteadev npm...