Malicious code in wm-plugin-user-behavior (npm)

The package wm-plugin-user-behavior was found to contain malicious code...

Malicious code in wm-visual-composer-types (npm)

The package wm-visual-composer-types was found to contain malicious code...

Malicious code in wm-service (npm)

The package wm-service was found to contain malicious code...

MAL-2025-39378 Malicious code in wm-visual-composer-types (npm)

The package wm-visual-composer-types was found to contain malicious code...

MAL-2025-39375 Malicious code in wm-plugin-accessibility (npm)

The package wm-plugin-accessibility was found to contain malicious code...

MAL-2025-39376 Malicious code in wm-plugin-user-behavior (npm)

The package wm-plugin-user-behavior was found to contain malicious code...

MAL-2025-39377 Malicious code in wm-service (npm)

The package wm-service was found to contain malicious code...

CVE-2024-50556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005568 fixes several issues. The following security issues were fixed: CVE-2024-46818: drm/amd/display: Check gpioid before used as array index bsc1231204. CVE-2024-46815: drm/amd/display: Check numvalidsets before accessing readerwmsets bsc1231196...

CVE-2025-23781

Insertion of Sensitive Information Into Sent Data vulnerability in Web Mumbai WM Options Import Export wm-options-import-export allows Retrieve Embedded Sensitive Data.This issue affects WM Options Import Export: from n/a through = 1.0.1...

CVE-2025-23781 WordPress WM Options Import Export plugin <= 1.0.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Web Mumbai WM Options Import Export wm-options-import-export allows Retrieve Embedded Sensitive Data.This issue affects WM Options Import Export: from n/a through = 1.0.1...

CVE-2025-23781

CVE-2025-23781 concerns the NotFound WM Options Import Export plugin for WordPress. Connected sources confirm the vulnerability is due to insertion of sensitive information into sent data, which allows retrieval of embedded sensitive data. Affected range is WM Options Import Export versions from ...

WordPress plugin WM Options Import Export 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

WordPress WM Options Import Export plugin <= 1.0.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin WM Options Import Export versions = 1.0.1...

CVE-2024-50556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

CVE-2024-50556 WordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

CVE-2024-50556 WordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

CVE-2024-50556

CVE-2024-50556 affects WordPress WM Zoom plugin versions

PT-2024-34334 · Wm Zoom · Wm Zoom

Name of the Vulnerable Software and Affected Versions: WM Zoom versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a DOM-Based XSS vulnerability. This means that the...

WordPress plugin WM Zoom 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...