Malicious code in wpt-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6928aebd6d492c4618abb9136b97cdf065cf37f91fab0e0a11a5688cd0e4f5f7 The package wpt-client was found to contain malicious code...

MAL-2026-1878 Malicious code in wpt-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6928aebd6d492c4618abb9136b97cdf065cf37f91fab0e0a11a5688cd0e4f5f7 The package wpt-client was found to contain malicious code...

CVE-2025-7825

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...

CVE-2025-7825 Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...

Malicious code in wpt-retriever (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcde936792fe2faa2b9af81f4b0880a90f4aa6c5aa3d8a9f0c067582a8fa1965 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7236 Malicious code in wpt-retriever (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcde936792fe2faa2b9af81f4b0880a90f4aa6c5aa3d8a9f0c067582a8fa1965 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Plugin A to Z Category Listing 1.3 - SQL Injection

Exploit Title: WordPress A to Z Category Listing plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $initletter = $GET'R'; $sql = "select from ".$tableprefix."terms wpt,".$tableprefix."termtaxonomy wptt where wpt.name like...