EUVD-2025-15486

Malicious code in bioql PyPI...

EUVD-2025-10768

Malicious code in bioql PyPI...

EUVD-2025-23652

Malicious code in bioql PyPI...

EUVD-2016-0993

Malicious code in bioql PyPI...

EUVD-2024-33543

Malicious code in bioql PyPI...

EUVD-2025-15507

Malicious code in bioql PyPI...

EUVD-2024-53076

Malicious code in bioql PyPI...

EUVD-2023-53920

Malicious code in bioql PyPI...

EUVD-2025-3249

Malicious code in bioql PyPI...

EUVD-2024-52046

Malicious code in bioql PyPI...

EUVD-2024-45651

Malicious code in bioql PyPI...

EUVD-2025-6634

Malicious code in bioql PyPI...

EUVD-2023-29419

Malicious code in bioql PyPI...

EUVD-2024-28450

Malicious code in bioql PyPI...

EUVD-2025-9808

Malicious code in bioql PyPI...

EUVD-2024-46838

Malicious code in bioql PyPI...

EUVD-2024-33408

Malicious code in bioql PyPI...

EUVD-2023-38081

Malicious code in bioql PyPI...

CVE-2025-8559 All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parameter

The All in One Music Player plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.1 via the 'theme' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which c...

CVE-2025-8559

CVE-2025-8559 affects the WordPress plugin All in One Music Player. A path traversal vulnerability via the theme parameter exists in versions up to 1.3.1, enabling authenticated attackers with Contributor+ privileges to read server files. Public sources in CNVD, CVE lists, and PT-2025-39939 descr...