EUVD-2025-6409

Malicious code in bioql PyPI...

PT-2025-11251

Name of the Vulnerable Software and Affected Versions: DethemeKit for Elementor plugin for WordPress versions up to, and including, 2.1.9 Description: The issue is related to Stored Cross-Site Scripting via the De Product Display Widget's countdown feature, caused by insufficient input sanitizati...

CVE-2025-1526: Improper Neutralization of Input During Web Page Generation

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget countdown feature in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...