EUVD-2025-2677

Malicious code in bioql PyPI...

EUVD-2024-52219

Malicious code in bioql PyPI...

EUVD-2023-54756

Malicious code in bioql PyPI...

EUVD-2024-42769

Malicious code in bioql PyPI...

EUVD-2025-20332

Malicious code in bioql PyPI...

EUVD-2025-18055

Malicious code in bioql PyPI...

EUVD-2025-24202

Malicious code in bioql PyPI...

EUVD-2022-45424

Malicious code in bioql PyPI...

EUVD-2024-46162

Malicious code in bioql PyPI...

EUVD-2024-34985

Malicious code in bioql PyPI...

EUVD-2024-35973

Malicious code in bioql PyPI...

EUVD-2024-18514

Malicious code in bioql PyPI...

EUVD-2021-31014

Malicious code in bioql PyPI...

EUVD-2023-45523

Malicious code in bioql PyPI...

EUVD-2023-41420

Malicious code in bioql PyPI...

CVE-2025-9884: Cross-Site Request Forgery (CSRF)

The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious w...

CVE-2025-9946

The LockerPress – WordPress Security Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Name text field. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting specially crafted input. Details Cross-site scripting or XSS is a code vulnerability that occurs when...

PT-2025-39175

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description An authenticated stored cross-site scripting XSS issue exists because of insufficient validation of user-provided input when uploading API documents within the Publisher portal. An...

Cross-site Scripting (XSS)

UnoPim is vulnerable to a stored cross-site scripting XSS vulnerability. The vulnerability is due to a MIME/sanitizer bypass in SVG files, which allows attackers to upload a specially crafted SVG image containing malicious script...