EUVD-2022-15724

Malicious code in bioql PyPI...

EUVD-2025-8554

Malicious code in bioql PyPI...

EUVD-2024-47625

Malicious code in bioql PyPI...

EUVD-2022-15716

Malicious code in bioql PyPI...

EUVD-2025-5441

Malicious code in bioql PyPI...

EUVD-2023-55593

Malicious code in bioql PyPI...

EUVD-2024-47446

Malicious code in bioql PyPI...

EUVD-2022-15793

Malicious code in bioql PyPI...

EUVD-2024-29314

Malicious code in bioql PyPI...

EUVD-2022-15880

Malicious code in bioql PyPI...

EUVD-2022-15883

Malicious code in bioql PyPI...

EUVD-2024-19859

Malicious code in bioql PyPI...

EUVD-2023-31644

Malicious code in bioql PyPI...

CVE-2024-31425

Cross-Site Request Forgery CSRF vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95...

CVE-2024-6332

The Booking for Appointments and Events Calendar – Amelia Premium and Lite plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the 'ameliaButtonCommand' function in all versions up to, and including, Premium 7.7 and Lite 1.2.4. This makes it...

CVE-2024-6552

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2. This is due to the plugin utilizing Symfony and leaving displayerrors on within test files. This makes it possible for unauthenticated...

CVE-2024-22298

Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98...

CVE-2023-29427

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

CVE-2023-27918

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL...

CVE-2022-0837

The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS notification as well as retrieve sensitive information about the admin, such as the email, account balance and payment history. A malicious...