EUVD-2024-47717

Malicious code in bioql PyPI...

EUVD-2024-27361

Malicious code in bioql PyPI...

EUVD-2024-48321

Malicious code in bioql PyPI...

EUVD-2024-16407

Malicious code in bioql PyPI...

EUVD-2024-27605

Malicious code in bioql PyPI...

EUVD-2023-58725

Malicious code in bioql PyPI...

EUVD-2022-45500

Malicious code in bioql PyPI...

EUVD-2025-8057

Malicious code in bioql PyPI...

EUVD-2024-27908

Malicious code in bioql PyPI...

EUVD-2023-24101

Malicious code in bioql PyPI...

EUVD-2024-49400

Malicious code in bioql PyPI...

EUVD-2023-57729

Malicious code in bioql PyPI...

CVE-2025-9333

The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2025-10306: External Control of File Name or Path

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

CVE-2025-6815: Improper Neutralization of Input During Web Page Generation

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘servicename’ parameter in all versions up to, and including, 5.1.94 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2025-43300

Name of the Vulnerable Software and Affected Versions Werk aan de Muur versions prior to 1.6 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access and above to inject arbitrary...

CVE-2025-10307: Improper Limitation of a Pathname to a Restricted Directory

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete backup functionality in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with...

CVE-2025-10747: Unrestricted Upload of File with Dangerous Type

The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download-add.php file in all versions up to, and including, 1.68.11. This makes it possible for authenticated attackers, with Administrator-level access and above, to...

CVE-2025-10037: Improper Neutralization of Special Elements used in an SQL Command

The Featured Image from URL FIFU plugin for WordPress is vulnerable to SQL Injection via the getpostswithinternalfeaturedimage function in all versions up to, and including, 5.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2025-10036: Improper Neutralization of Special Elements used in an SQL Command

The Featured Image from URL FIFU plugin for WordPress is vulnerable to SQL Injection via the getallurls function in all versions up to, and including, 5.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...