EUVD-2025-19866

Malicious code in bioql PyPI...

EUVD-2025-19865

Malicious code in bioql PyPI...

EUVD-2023-56136

Malicious code in bioql PyPI...

EUVD-2022-47262

Malicious code in bioql PyPI...

EUVD-2025-19291

Malicious code in bioql PyPI...

EUVD-2024-54957

Malicious code in bioql PyPI...

EUVD-2022-29962

Malicious code in bioql PyPI...

EUVD-2022-37509

Malicious code in bioql PyPI...

EUVD-2022-47257

Malicious code in bioql PyPI...

EUVD-2023-2756

Malicious code in bioql PyPI...

EUVD-2022-47266

Malicious code in bioql PyPI...

EUVD-2024-54950

Malicious code in bioql PyPI...

EUVD-2025-25435

Malicious code in bioql PyPI...

CVE-2025-10953 UTT 1200GW/1250GW formApMail buffer overflow

A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. This vulnerability affects unknown code of the file /goform/formApMail. The manipulation of the argument senderEmail leads to buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2025-58689

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tapfiliate Tapfiliate tapfiliate allows Stored XSS.This issue affects Tapfiliate: from n/a through = 3.2.2...

CVE-2025-58689 WordPress Tapfiliate Plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tapfiliate Tapfiliate tapfiliate allows Stored XSS.This issue affects Tapfiliate: from n/a through = 3.2.2...

CVE-2025-58689

CVE-2025-58689 : Affected software is Tapfiliate (WordPress plugin) up to version 3.2.2. The issue is an authenticated Stored Cross-Site Scripting (XSS) vulnerability in web page generation, as described in the CVE entry and corroborated by the Wordfence vulnerability details. The CVSS base score...

CVE-2025-10690

The Goza - Nonprofit Charity WordPress Theme is affected (versions

PT-2025-38501

Name of the Vulnerable Software and Affected Versions Goza - Nonprofit Charity WordPress Theme versions prior to and including 3.2.2 Description The Goza - Nonprofit Charity WordPress Theme is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the beplus import...

CVE-2025-10316

The extension "Form to Database" is susceptible to Cross-Site Scripting. This issue affects the following versions: before 2.2.5, from 3.0.0 before 3.2.2, from 4.0.0 before 4.2.3, from 5.0.0 before 5.0.2...