CVE-2026-49772

CVE-2026-49772 affects WordPress plugin The Events Calendar (Liquid Web / StellarWP) versions 6.15.12–6.16.2. The issue is an SQL Injection due to improper neutralization of special elements, enabling blind SQL injection. CVSS 3.1 base score 9.3 (CRITICAL) with AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L...

CVE-2026-40780

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

CVE-2026-40780

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

EUVD-2026-33948

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

CVE-2026-40780

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

PT-2026-45779

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

PT-2026-45465

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through 4.14.5...

WordPress The Events Calendar plugin <= 6.15.12.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin The Events Calendar versions = 6.15.12.2...

WordPress The Events Calendar plugin <= 6.15.9 - Missing Authorization to Authenticated (Subscriber+) Draft Event Title/QR Code Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Draft Event Title/QR Code Exposure vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin The Events Calendar versions = 6.15.9...

EUVD-2025-24228

Malicious code in bioql PyPI...

EUVD-2024-36426

Malicious code in bioql PyPI...

EUVD-2023-27759

Malicious code in bioql PyPI...

Malicious Package

Overview @liquid-web/mileage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @liquid-web/core-services is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @liquid-web/mileage (npm)

The package @liquid-web/mileage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8574d7642f0f1a5d62c5aec640322437ffa389e114e7cdbcf7834417d9bdab8b Any computer that has this package installed or running should be considered fully...

MAL-2025-47037 Malicious code in @liquid-web/mileage (npm)

The package @liquid-web/mileage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8574d7642f0f1a5d62c5aec640322437ffa389e114e7cdbcf7834417d9bdab8b Any computer that has this package installed or running should be considered fully...

Malicious code in @liquid-web/common (npm)

The package @liquid-web/common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2152309995aeb57c2d293acf6ebb54fdc8e47239ba56a4b742bd00743a7468a5 Any computer that has this package installed or running should be considered fully...

Malicious code in @liquid-web/utils (npm)

The package @liquid-web/utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02e29a386f30eacfd4a3e7023262f0bb759557fb0a41790632720ff54b920a8d Any computer that has this package installed or running should be considered fully...

Malicious Package

Overview @liquid-web/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @liquid-web/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...