EUVD-2025-14001

Malicious code in bioql PyPI...

EUVD-2025-19915

Malicious code in bioql PyPI...

EUVD-2025-11503

Malicious code in bioql PyPI...

EUVD-2024-47747

Malicious code in bioql PyPI...

EUVD-2023-12351

Malicious code in bioql PyPI...

EUVD-2025-4741

Malicious code in bioql PyPI...

EUVD-2024-33259

Malicious code in bioql PyPI...

EUVD-2025-13997

Malicious code in bioql PyPI...

EUVD-2024-16689

Malicious code in bioql PyPI...

EUVD-2022-43492

Malicious code in bioql PyPI...

EUVD-2024-48403

Malicious code in bioql PyPI...

EUVD-2024-16903

Malicious code in bioql PyPI...

EUVD-2025-26935

Malicious code in bioql PyPI...

EUVD-2024-32716

Malicious code in bioql PyPI...

EUVD-2023-33832

Malicious code in bioql PyPI...

EUVD-2024-27321

Malicious code in bioql PyPI...

EUVD-2024-33750

Malicious code in bioql PyPI...

CVE-2025-10309 PayPal Forms <= 1.0.3 - Cross-Site Request Forgery

The PayPal Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing nonce validation on the form creation and management functions. This makes it possible for unauthenticated attackers to create new PayPal forms and...

CVE-2025-10499

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation on the maybeoptin function. This makes it possible for unauthenticated...

CVE-2025-9898

CVE-2025-9898 (cForms – Light speed fast Form Builder for WordPress) is a Cross-Site Request Forgery vulnerability present in all versions up to 3.0.0. The root cause is missing or incorrect nonce validation on the cforms_api function, enabling unauthenticated attackers to modify forms and their ...