EUVD-2024-29171

Malicious code in bioql PyPI...

EUVD-2023-37484

Malicious code in bioql PyPI...

EUVD-2024-26771

Malicious code in bioql PyPI...

EUVD-2024-50171

Malicious code in bioql PyPI...

EUVD-2024-16900

Malicious code in bioql PyPI...

EUVD-2024-42573

Malicious code in bioql PyPI...

EUVD-2024-17078

Malicious code in bioql PyPI...

EUVD-2024-22195

Malicious code in bioql PyPI...

EUVD-2024-40118

Malicious code in bioql PyPI...

EUVD-2023-39877

Malicious code in bioql PyPI...

EUVD-2024-16899

Malicious code in bioql PyPI...

EUVD-2024-49127

Malicious code in bioql PyPI...

EUVD-2023-49929

Malicious code in bioql PyPI...

CVE-2024-47648

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Metagauss EventPrime eventprime-event-calendar-management.This issue affects EventPrime: from n/a through = 4.0.4.5...

CVE-2024-29776

Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...

CVE-2024-1321

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 3.4.2. This is due to the plugin allowing unauthenticated users to update the status of order payments. This makes it possible for unauthenticated...

CVE-2024-1320

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'offlinestatus' parameter in all versions up to, and including, 3.4.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-1124

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the epsendattendeesemail function in all versions up to, and including, 3.4.1. This makes it possible for authenticated attackers, with...

CVE-2024-43223

Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 4.0.3.2...

CVE-2024-8369

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view...