54359 matches found
CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...
CVE-2025-12732
CVE-2025-12732 impacts the WordPress plugin “WP Import – Ultimate CSV XML Importer for WordPress” (versions
EUVD-2025-124073
Malicious code in ophiuchus-vega-xml-graphql npm...
Malicious code in babel-pegasus-xml-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c99cfe63d56d39e7c66715a4797bb30032ba8dd6254bdf514d52cf979e3706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in husky-xml-dagda-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee168c20fdd786ce490576e77ab42a5f0f5a285a2cb3b5a2bdda2d5906509c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in subscription-xml-jasmine-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eabecc43d01c8587b8f2f53eb45388a9476cf274b7a7c45c565f45dddd21bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116226
Malicious code in babel-xml-config-hyperion npm...
EUVD-2025-123075
Malicious code in pulsar-xml-nextjs-eleventy npm...
Malicious code in xml-perseus-hugo-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in husky-xml-kastra-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9c2bf1b1dde395f39bfb95800a0f14b8fd95f06ea2bbcea41cf3fddbcc839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121735
Malicious code in spinner-dagda-xml-public npm...
EUVD-2025-124494
Malicious code in nextjs-xml-yaml-fork npm...
EUVD-2025-120197
Malicious code in xml-relay-jupiter-ultra npm...
EUVD-2025-123700
Malicious code in pino-loop-relay-xml npm...
EUVD-2025-115793
Malicious code in callback-reveal-md-xml-shelljs npm...
EUVD-2025-113185
Malicious code in global-csrf-xml-package npm...
EUVD-2025-115324
Malicious code in chromedriver-xml-pegasus-changelog npm...
Malicious code in radiant-vuetify-pulsar-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5c4b7e2c2de1ea070292038e89f90d1b8687fb1eb1ead236ee6a082436ce7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eleventy-envconfig-xml-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b303cfab127f5de13e9ddbdc9cfbd359b52b49413136ffa41fc2ce9ad4d257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...