EUVD-2024-53452

Malicious code in bioql PyPI...

EUVD-2025-2745

Malicious code in bioql PyPI...

EUVD-2023-32412

Malicious code in bioql PyPI...

EUVD-2024-53453

Malicious code in bioql PyPI...

EUVD-2025-11130

Malicious code in bioql PyPI...

EUVD-2025-30648

Malicious code in bioql PyPI...

EUVD-2024-46826

Malicious code in bioql PyPI...

EUVD-2024-49116

Malicious code in bioql PyPI...

EUVD-2024-36663

Malicious code in bioql PyPI...

EUVD-2024-53454

Malicious code in bioql PyPI...

CVE-2025-57988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through = 3.7.0.3...

CVE-2025-57988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through = 3.7.0.3...

WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Uncanny Toolkit for LearnDash versions = 3.7.0.3...

CVE-2025-57988

CVE-2025-57988 relates to the Uncanny Toolkit for LearnDash. The vulnerability is a stored cross-site scripting flaw caused by improper neutralization of input during web page generation in the plugin. Affected software ranges to include Uncanny Toolkit for LearnDash versions up to 3.7.x (as refl...

CVE-2025-57988 WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through = 3.7.0.3...

WordPress plugin Uncanny Toolkit for LearnDash 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38838

Name of the Vulnerable Software and Affected Versions Uncanny Owl Uncanny Toolkit for LearnDash versions through 3.0.7.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This issue could...

CVE-2025-22346

Server-Side Request Forgery SSRF vulnerability in Faizaan Gagan Course Migration for LearnDash allows Server Side Request Forgery.This issue affects Course Migration for LearnDash: from 1.0.2 through n/a...

CVE-2024-8350

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgmmanagement/v1/adduser/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for authenticated attackers, with group...

CVE-2024-1210

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes...