EUVD-2025-27803

Malicious code in bioql PyPI...

EUVD-2022-41575

Malicious code in bioql PyPI...

EUVD-2022-51284

Malicious code in bioql PyPI...

EUVD-2022-51299

Malicious code in bioql PyPI...

EUVD-2025-26191

Malicious code in bioql PyPI...

EUVD-2025-25730

Malicious code in bioql PyPI...

EUVD-2025-25697

Malicious code in bioql PyPI...

EUVD-2025-31158

Malicious code in bioql PyPI...

EUVD-2025-18659

Malicious code in bioql PyPI...

EUVD-2025-25393

Malicious code in bioql PyPI...

EUVD-2025-15821

Malicious code in bioql PyPI...

EUVD-2025-30400

Malicious code in bioql PyPI...

EUVD-2025-28739

Malicious code in bioql PyPI...

EUVD-2025-26578

Malicious code in bioql PyPI...

EUVD-2025-24005

Malicious code in bioql PyPI...

EUVD-2025-24060

Malicious code in bioql PyPI...

CVE-2024-56804 Video Station

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

CVE-2025-9200 Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2025-9200 Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2025-10726

CVE-2025-10726 (WPRecovery) affects WordPress WPRecovery plugin up to version 2.0. It describes an unauthenticated SQL Injection via data[id] that can cause leakage of sensitive data and, via the query result being passed to unlink(), arbitrary file deletion on the server. The Wordfence report co...