CVE-2025-9030

CVE-2025-9030 concerns the Majestic Before After Image WordPress plugin (versions

EUVD-2025-27658

Malicious code in bioql PyPI...

EUVD-2025-25325

Malicious code in bioql PyPI...

EUVD-2025-28792

Malicious code in bioql PyPI...

EUVD-2025-27536

Malicious code in bioql PyPI...

EUVD-2025-25665

Malicious code in bioql PyPI...

EUVD-2025-28701

Malicious code in bioql PyPI...

EUVD-2025-28795

Malicious code in bioql PyPI...

EUVD-2025-31685

Malicious code in bioql PyPI...

EUVD-2025-27651

Malicious code in bioql PyPI...

EUVD-2025-31686

Malicious code in bioql PyPI...

EUVD-2025-28749

Malicious code in bioql PyPI...

EUVD-2025-32267

Malicious code in bioql PyPI...

EUVD-2025-28600

Malicious code in bioql PyPI...

EUVD-2025-27617

Malicious code in bioql PyPI...

EUVD-2025-31675

Malicious code in bioql PyPI...

CVE-2025-7825

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...

CVE-2025-10192

The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppeeffect' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2025-10165 AP Background <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The AP Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advparallaxback' shortcode in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-10165 AP Background <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The AP Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advparallaxback' shortcode in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...