EUVD-2025-27953

Malicious code in bioql PyPI...

CVE-2025-39448 WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.4.1...

WordPress Smush Image 2.7.4.1 Directory Traversal Vulnerability

WordPress Smush Image plugin version 2.7.4.1 suffers from a directory traversal vulnerability. Credit Ricardo Sanchez Smush Image Wordpress WP plugin is prone to file transversal vulnerability because it fails to sufficiently folders privacy. To exploit this issue following steps: Demo url:...