EUVD-2024-54083

Malicious code in bioql PyPI...

EUVD-2023-58726

Malicious code in bioql PyPI...

EUVD-2024-27605

Malicious code in bioql PyPI...

EUVD-2023-58725

Malicious code in bioql PyPI...

EUVD-2025-1752

Malicious code in bioql PyPI...

EUVD-2025-21574

Malicious code in bioql PyPI...

EUVD-2024-32513

Malicious code in bioql PyPI...

EUVD-2024-31631

Malicious code in bioql PyPI...

EUVD-2022-42922

Malicious code in bioql PyPI...

EUVD-2024-50680

Malicious code in bioql PyPI...

EUVD-2024-16411

Malicious code in bioql PyPI...

EUVD-2024-51638

Malicious code in bioql PyPI...

CVE-2025-9332

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-9372 Ultimate Multi Design Video Carousel <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting

The Ultimate Multi Design Video Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access, to inject...

CVE-2025-10053

CVE-2025-10053 concerns the WordPress plugin TableGen – Data Table Generator . The vulnerability is a stored XSS in admin settings due to insufficient input sanitization and output escaping, affecting all versions up to 1.3.1. Exploitation requires authenticated access with administrator-level pr...

PT-2025-40494

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-10490

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-10490

CVE-2025-10490 affects Zephyr Project Manager, a WordPress plugin. A Stored XSS flaw exists in admin settings across all versions up to 3.3.202, exploitable by authenticated administrators (and above) on multi-site setups with unfiltered_html disabled. Impact is arbitrary script injection that ex...

CVE-2025-9367

CVE-2025-9367 affects the Welcart e-Commerce plugin for WordPress (versions up to 2.11.20). It enables stored Cross-Site Scripting via settings due to insufficient input sanitization and output escaping. Authenticated attackers with editor-level permissions or higher can inject scripts that execu...

CVE-2025-5083 Amministrazione Trasparente <= 9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Function

The Amministrazione Trasparente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...