CVE-2025-53423

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Triss triss allows Reflected XSS.This issue affects Triss: from n/a through = 2.6...

CVE-2025-32283

Deserialization of Untrusted Data vulnerability in designthemes Solar Energy solar allows Object Injection.This issue affects Solar Energy: from n/a through = 3.5...

CVE-2025-60234 WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property allows Object Injection.This issue affects Single Property: from n/a through = 2.8...

PT-2025-43149

Name of the Vulnerable Software and Affected Versions designthemes Insurance versions through 3.5 Description The software contains a flaw due to deserialization of untrusted data, which can lead to object injection. This impacts the Insurance application. Recommendations Update to a version newe...

PT-2025-43262

Name of the Vulnerable Software and Affected Versions designthemes Triss versions through 2.6 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject...

CVE-2025-60234: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property allows Object Injection.This issue affects Single Property: from n/a through = 2.8...

CVE-2025-60212: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection.This issue affects VEDA: from n/a through = 4.2...

CVE-2025-53423: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Triss triss allows Reflected XSS.This issue affects Triss: from n/a through = 2.6...

CVE-2025-60228: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in designthemes Knowledge Base kbase allows Object Injection.This issue affects Knowledge Base: from n/a through = 2.9...

PT-2025-43150

Name of the Vulnerable Software and Affected Versions designthemes Solar Energy versions through 3.5 Description The software contains a flaw due to deserialization of untrusted data, which can lead to object injection. Recommendations Versions prior to 3.5 should be updated...

EUVD-2025-19302

Malicious code in bioql PyPI...

EUVD-2024-54004

Malicious code in bioql PyPI...

EUVD-2025-8050

Malicious code in bioql PyPI...

EUVD-2025-20005

Malicious code in bioql PyPI...

EUVD-2025-20001

Malicious code in bioql PyPI...

EUVD-2025-27824

Malicious code in bioql PyPI...

CVE-2025-31427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Invico - WordPress Consulting Business Theme invico allows Reflected XSS.This issue affects Invico - WordPress Consulting Business Theme: from n/a through = 1.9...

CVE-2025-31427: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Invico - WordPress Consulting Business Theme invico allows Reflected XSS.This issue affects Invico - WordPress Consulting Business Theme: from n/a through = 1.9...

CVE-2025-52828

Deserialization of Untrusted Data vulnerability in designthemes Red Art redart allows Object Injection.This issue affects Red Art: from n/a through = 3.8...

CVE-2025-52833

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in designthemes LMS lms allows SQL Injection.This issue affects LMS: from n/a through = 9.2...