EUVD-2025-18414

Malicious code in bioql PyPI...

EUVD-2025-18400

Malicious code in bioql PyPI...

EUVD-2025-22303

Malicious code in bioql PyPI...

EUVD-2024-18536

Malicious code in bioql PyPI...

EUVD-2025-4210

Malicious code in bioql PyPI...

EUVD-2022-0977

Malicious code in bioql PyPI...

EUVD-2023-51874

Malicious code in bioql PyPI...

EUVD-2025-6261

Malicious code in bioql PyPI...

EUVD-2024-41599

Malicious code in bioql PyPI...

EUVD-2023-50921

Malicious code in bioql PyPI...

EUVD-2025-22654

Malicious code in bioql PyPI...

EUVD-2025-22663

Malicious code in bioql PyPI...

EUVD-2022-6267

Malicious code in bioql PyPI...

EUVD-2025-12503

Malicious code in bioql PyPI...

EUVD-2021-9335

Malicious code in bioql PyPI...

EUVD-2024-51158

Malicious code in bioql PyPI...

EUVD-2024-50168

Malicious code in bioql PyPI...

CVE-2025-10658

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it possible for unauthenticated attackers ...

CVE-2025-10658

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it possible for unauthenticated attackers ...

CVE-2025-7665

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handlemofirebaseformoptions' function in versions 3.1.0 to 3.6.2. This makes it possible for unauthenticated attackers to update the default role to...