EUVD-2022-15353

Malicious code in bioql PyPI...

EUVD-2022-15354

Malicious code in bioql PyPI...

EUVD-2022-15355

Malicious code in bioql PyPI...

EUVD-2025-24991

Malicious code in bioql PyPI...

EUVD-2024-51717

Malicious code in bioql PyPI...

EUVD-2023-37382

Malicious code in bioql PyPI...

EUVD-2024-35505

Malicious code in bioql PyPI...

EUVD-2023-49581

Malicious code in bioql PyPI...

EUVD-2023-49391

Malicious code in bioql PyPI...

EUVD-2023-48811

Malicious code in bioql PyPI...

EUVD-2023-27881

Malicious code in bioql PyPI...

EUVD-2025-24716

Malicious code in bioql PyPI...

EUVD-2023-39901

Malicious code in bioql PyPI...

EUVD-2023-50341

Malicious code in bioql PyPI...

EUVD-2023-50344

Malicious code in bioql PyPI...

EUVD-2024-36880

Malicious code in bioql PyPI...

CVE-2025-9898: Cross-Site Request Forgery (CSRF)

The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the cformsapi function. This makes it possible for unauthenticated attackers to modify...

CVE-2025-10498: Cross-Site Request Forgery (CSRF)

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes it possible for unauthenticated...

CVE-2025-10499: Cross-Site Request Forgery (CSRF)

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation on the maybeoptin function. This makes it possible for unauthenticated...

CVE-2025-10489: Missing Authorization

The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a missing capability check on the registerposttypes function in all versions up to, and including, 1.12.0. This makes it...