EUVD-2025-6614

Malicious code in bioql PyPI...

EUVD-2024-49932

Malicious code in bioql PyPI...

EUVD-2025-1598

Malicious code in bioql PyPI...

EUVD-2023-57348

Malicious code in bioql PyPI...

EUVD-2024-27212

Malicious code in bioql PyPI...

EUVD-2023-54039

Malicious code in bioql PyPI...

EUVD-2024-44001

Malicious code in bioql PyPI...

EUVD-2024-27104

Malicious code in bioql PyPI...

EUVD-2022-45960

Malicious code in bioql PyPI...

EUVD-2024-46463

Malicious code in bioql PyPI...

EUVD-2024-33397

Malicious code in bioql PyPI...

EUVD-2024-51568

Malicious code in bioql PyPI...

EUVD-2024-32762

Malicious code in bioql PyPI...

CVE-2025-9859

The Fintelligence Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fintelligence-calculator' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2025-9372

The Ultimate Multi Design Video Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access, to inject...

CVE-2025-9859 Fintelligence Calculator <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Fintelligence Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fintelligence-calculator' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2025-9859

Summary: CVE-2025-9859 affects the WordPress plugin “Fintelligence Calculator” (shortcode: fintelligence-calculator). The issue is Stored Cross-Site Scripting in versions up to 1.0.3 due to insufficient input sanitization and output escaping of user-supplied shortcode attributes. Impact: Authenti...

CVE-2025-10053 TableGen – Data Table Generator <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The TableGen – Data Table Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-9080 Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...

CVE-2025-9876 Ird Slider <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...