EUVD-2022-24736

Malicious code in bioql PyPI...

EUVD-2022-3625

Malicious code in bioql PyPI...

EUVD-2023-58393

Malicious code in bioql PyPI...

EUVD-2023-58023

Malicious code in bioql PyPI...

EUVD-2023-57933

Malicious code in bioql PyPI...

EUVD-2024-53982

Malicious code in bioql PyPI...

EUVD-2024-50036

Malicious code in bioql PyPI...

EUVD-2025-30237

Malicious code in bioql PyPI...

EUVD-2022-42255

Malicious code in bioql PyPI...

EUVD-2022-34711

Malicious code in bioql PyPI...

EUVD-2025-19920

Malicious code in bioql PyPI...

EUVD-2024-27493

Malicious code in bioql PyPI...

CVE-2025-9587

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-9697

The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-9697

The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-9697

CVE-2025-9697 affects the Ajax WooSearch WordPress plugin (versions

CVE-2025-9697 Ajax WooSearch <= 1.0.0 - Unauthenticated SQL Injection

The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-9587

CVE-2025-9587 affects the WordPress plugin CTL Behance Importer Lite (versions up to 1.0). The vulnerability is a SQL injection caused by improper sanitization/escaping of a parameter before it is used in a SQL statement via an unauthenticated AJAX action. Multiple connected sources (Red Hat advi...

CVE-2025-9587 CTL Behance Importer Lite <= 1.0 - Unauthenticated SQL Injection

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-7038

The LatePoint plugin for WordPress is vulnerable to Authentication Bypass due to insufficient identity verification within the stepsloadstep route of the latepointroutecall AJAX endpoint in all versions up to, and including, 5.1.94. The endpoint reads the client-supplied customer email and relate...