Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ads Txt Manager Plugin | — | Update ads-txt-manager plugin to version 1.4.3, or a newer patched version | May 15, 2025 | Feb 23, 2023 |
| Ads Txt Plugin | — | Update ads-txt plugin to version 1.4.3, or a newer patched version | Jul 21, 2025 | Feb 23, 2023 |
| Insecure Content Warning Plugin | — | Update insecure-content-warning plugin to version 1.1.0, or a newer patched version | May 15, 2025 | Feb 23, 2023 |
| Maps Block Apple Plugin | — | Update maps-block-apple plugin to version 1.1.1, or a newer patched version | May 15, 2025 | Feb 23, 2023 |
| Retro Winamp Block Plugin | — | Update retro-winamp-block plugin to version 1.3.0, or a newer patched version | May 15, 2025 | Feb 23, 2023 |
| Simple Local Avatars Plugin | — | Update simple-local-avatars plugin to version 2.7.4, or a newer patched version | May 15, 2025 | Feb 23, 2023 |
| Simple Podcasting Plugin | — | Update simple-podcasting plugin to version 1.5.0, or a newer patched version | May 15, 2025 | Feb 23, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub