EUVD-2025-26952

Malicious code in bioql PyPI...

EUVD-2023-34121

Malicious code in bioql PyPI...

EUVD-2024-53961

Malicious code in bioql PyPI...

EUVD-2024-42337

Malicious code in bioql PyPI...

EUVD-2024-1787

Malicious code in bioql PyPI...

EUVD-2024-17378

Malicious code in bioql PyPI...

EUVD-2024-48643

Malicious code in bioql PyPI...

EUVD-2024-47270

Malicious code in bioql PyPI...

EUVD-2024-48638

Malicious code in bioql PyPI...

EUVD-2025-8316

Malicious code in bioql PyPI...

EUVD-2024-48584

Malicious code in bioql PyPI...

EUVD-2022-34402

Malicious code in bioql PyPI...

CVE-2025-32689 WordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Convers Lab WP SmartPay smartpay.This issue affects WP SmartPay: from n/a through = 2.8.2...

CVE-2025-32689 WordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Convers Lab WP SmartPay smartpay.This issue affects WP SmartPay: from n/a through = 2.8.2...

CVE-2025-58825

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Comment Form WP – Customize Default Comment Form comment-form-wp allows Stored XSS.This issue affects Comment Form WP – Customize Default Comment Form: from n/a through = 2.0.1...

PT-2025-36164

Name of the Vulnerable Software and Affected Versions: Habibur Rahman Comment Form WP – Customize Default Comment Form versions through 2.0.0 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for...

WordPress Request a Quote Form plugin code execution vulnerability

WordPress Request a Quote Form plugin is a plugin for collecting and managing quote requests with support for custom forms and centralized processing for quote requests for products, services or custom orders. A code execution vulnerability exists in the WordPress Request a Quote Form plugin that...

WordPress Bit Form – Contact Form plugin <= 2.20.3 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Bit Form versions = 2.20.3...

CVE-2025-6679 Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload

The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote co...

CVE-2025-8420 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution

Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emdformbuilderlitepagenum function. This is due to the plugin not properly validating user input before using it as a function name. This...