EUVD-2022-47991

Malicious code in bioql PyPI...

EUVD-2024-28438

Malicious code in bioql PyPI...

EUVD-2025-18510

Malicious code in bioql PyPI...

EUVD-2023-46295

Malicious code in bioql PyPI...

EUVD-2021-8421

Malicious code in bioql PyPI...

EUVD-2024-22248

Malicious code in bioql PyPI...

EUVD-2023-56184

Malicious code in bioql PyPI...

EUVD-2025-3591

Malicious code in bioql PyPI...

EUVD-2022-39539

Malicious code in bioql PyPI...

EUVD-2025-26974

Malicious code in bioql PyPI...

CVE-2025-9130

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9130 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9130

CVE-2025-9130 refers to the WordPress Unify plugin vulnerable to Stored XSS via the unify_checkout shortcode in versions up to and including 3.4.7. The issue arises from insufficient input sanitization and output escaping on user-supplied attributes, enabling authenticated attackers with contribu...

Malicious Package

Overview checkout-sheet-kit-react-native is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

MAL-2025-47549 Malicious code in checkout-sheet-kit-react-native (npm)

The package checkout-sheet-kit-react-native was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54397e8e5f2da7ea785328f6913d946c6a1a7daaab2b703580781f80f4e19726 Any computer that has this package installed or running should be...

Malicious code in checkout-sheet-kit-react-native (npm)

The package checkout-sheet-kit-react-native was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54397e8e5f2da7ea785328f6913d946c6a1a7daaab2b703580781f80f4e19726 Any computer that has this package installed or running should be...

CVE-2025-57903

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSuperiors Developer WooCommerce Additional Fees On Checkout Free woo-additional-fees-on-checkout-wordpress allows Stored XSS.This issue affects WooCommerce Additional Fees On Checkout Free: from...

CVE-2025-10778

A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file /checkout/confirm/ of the component Gift Voucher Handler. The manipulation leads to race condition. The attack may be initiated remotely. The attack's complexity is rated as high. The...

WordPress WooCommerce Additional Fees On Checkout (Free) plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin WooCommerce Additional Fees On Checkout Free versions = 1.5.2...

CVE-2025-57903

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSuperiors Developer WooCommerce Additional Fees On Checkout Free woo-additional-fees-on-checkout-wordpress allows Stored XSS.This issue affects WooCommerce Additional Fees On Checkout Free: from...