EUVD-2024-31723

Malicious code in bioql PyPI...

EUVD-2025-16012

Malicious code in bioql PyPI...

EUVD-2025-29257

Malicious code in bioql PyPI...

EUVD-2025-16013

Malicious code in bioql PyPI...

EUVD-2025-12233

Malicious code in bioql PyPI...

EUVD-2025-16011

Malicious code in bioql PyPI...

EUVD-2025-4378

Malicious code in bioql PyPI...

EUVD-2024-1031

Malicious code in bioql PyPI...

EUVD-2025-28211

Malicious code in bioql PyPI...

EUVD-2022-28658

Malicious code in bioql PyPI...

EUVD-2025-25283

Malicious code in bioql PyPI...

EUVD-2022-1774

Malicious code in bioql PyPI...

CVE-2025-5305

The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers...

PT-2025-38633

Name of the Vulnerable Software and Affected Versions SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress versions up to and including 3.3.7 Description The SupportCandy plugin for WordPress is susceptible to authentication bypass due to missing rate limiting on One-Time...

WordPress plugin SupportCandy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress Miniorange OTP Verification with Firebase plugin 3.1.0-3.6.2 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin Miniorange OTP Verification with Firebase versions 3.1.0-3.6.2...

CVE-2025-5305

CVE-2025-5305 : The WordPress plugin Password Reset with Code for WordPress REST API (bdvs-password-reset) before 0.0.17 uses insecure OTP generation (not cryptographically sound), enabling potential account takeover. Affected plugin/version: Password Reset with Code for WordPress REST API (

PT-2025-38299

Name of the Vulnerable Software and Affected Versions Password Reset with Code for WordPress REST API plugin versions prior to 0.0.17 Description The plugin does not employ cryptographically secure algorithms for generating One-Time Password OTP codes, which could allow for account takeovers...

WordPress plugin Password Reset with Code for WordPress REST API Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2025-43798

Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password TOTP to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user...