EUVD-2025-5903

Malicious code in bioql PyPI...

EUVD-2025-25374

Malicious code in bioql PyPI...

EUVD-2025-19252

Malicious code in bioql PyPI...

EUVD-2024-34407

Malicious code in bioql PyPI...

EUVD-2024-43510

Malicious code in bioql PyPI...

EUVD-2024-32862

Malicious code in bioql PyPI...

EUVD-2022-3456

Malicious code in bioql PyPI...

EUVD-2024-49791

Malicious code in bioql PyPI...

EUVD-2024-44460

Malicious code in bioql PyPI...

EUVD-2025-11645

Malicious code in bioql PyPI...

WordPress BuddyPress plugin <= 14.3.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ? in WordPress Plugin BuddyPress versions = 14.3.4...

CVE-2025-58263

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddyDev BuddyPress Notification Widget buddypress-notifications-widget allows Stored XSS.This issue affects BuddyPress Notification Widget: from n/a through = 1.3.3...

CVE-2025-58263

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddyDev BuddyPress Notification Widget buddypress-notifications-widget allows Stored XSS.This issue affects BuddyPress Notification Widget: from n/a through = 1.3.3...

WordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin BuddyPress Notification Widget versions = 1.3.3...

CVE-2025-58263 WordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddyDev BuddyPress Notification Widget buddypress-notifications-widget allows Stored XSS.This issue affects BuddyPress Notification Widget: from n/a through = 1.3.3...

CVE-2025-58263

CVE-2025-58263 is a stored Cross-Site Scripting vulnerability in the WordPress plugin BuddyPress Notification Widget . Affected range is listed as “from n/a through 1.3.3.” The root cause is described as improper neutralization of input during web page generation. The vulnerability affects the wi...

CVE-2025-58263 WordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddyDev BuddyPress Notification Widget buddypress-notifications-widget allows Stored XSS.This issue affects BuddyPress Notification Widget: from n/a through = 1.3.3...

WordPress plugin BuddyPress Notification Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...

PT-2025-38926

Name of the Vulnerable Software and Affected Versions BuddyPress Notification Widget versions through 1.3.3 Description The BuddyPress Notification Widget contains a flaw related to improper input handling during web page generation, which can lead to Stored Cross-Site Scripting XSS. This allows ...

CVE-2025-48158

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Alex Githatu BuddyPress XProfile Custom Image Field buddypress-xprofile-image-field allows Path Traversal.This issue affects BuddyPress XProfile Custom Image Field: from n/a through = 3.0.1...