EUVD-2025-27207

Malicious code in bioql PyPI...

EUVD-2024-25350

Malicious code in bioql PyPI...

EUVD-2024-15837

Malicious code in bioql PyPI...

EUVD-2023-3207

Malicious code in bioql PyPI...

EUVD-2021-3324

Malicious code in bioql PyPI...

EUVD-2022-25616

Malicious code in bioql PyPI...

EUVD-2021-27785

Malicious code in bioql PyPI...

EUVD-2023-25510

Malicious code in bioql PyPI...

EUVD-2025-26626

Malicious code in bioql PyPI...

EUVD-2022-6869

Malicious code in bioql PyPI...

EUVD-2021-3313

Malicious code in bioql PyPI...

EUVD-2023-3287

Malicious code in bioql PyPI...

EUVD-2025-16292

Malicious code in bioql PyPI...

EUVD-2025-32245

Malicious code in bioql PyPI...

CVE-2025-9897

The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2. This is due to missing or incorrect nonce validation on the advParallaxBackAdminSaveSlider function. This makes it possible for unauthenticated attackers to create or...

CVE-2025-10165

The AP Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advparallaxback' shortcode in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9897

CVE-2025-9897 : The WordPress AP Background plugin (versions up to 3.8.2) is affected by a Cross-Site Request Forgery due to missing/incorrect nonce validation in advParallaxBackAdminSaveSlider. Exploitation requires user interaction (social engineering via an admin action), and it can enable una...

EUVD-2025-32246

The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2. This is due to missing or incorrect nonce validation on the advParallaxBackAdminSaveSlider function. This makes it possible for unauthenticated attackers to create or...

CVE-2025-9897 AP Background <= 3.8.2 - Cross-Site Request Forgery

The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2. This is due to missing or incorrect nonce validation on the advParallaxBackAdminSaveSlider function. This makes it possible for unauthenticated attackers to create or...

CVE-2025-10165 AP Background <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The AP Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advparallaxback' shortcode in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...