EUVD-2024-27091

Malicious code in bioql PyPI...

EUVD-2023-58951

Malicious code in bioql PyPI...

EUVD-2023-54538

Malicious code in bioql PyPI...

EUVD-2025-3781

Malicious code in bioql PyPI...

EUVD-2025-15269

Malicious code in bioql PyPI...

EUVD-2025-7435

Malicious code in bioql PyPI...

EUVD-2023-57427

Malicious code in bioql PyPI...

EUVD-2025-28001

Malicious code in bioql PyPI...

EUVD-2024-17334

Malicious code in bioql PyPI...

EUVD-2024-27453

Malicious code in bioql PyPI...

EUVD-2024-40621

Malicious code in bioql PyPI...

EUVD-2024-54983

Malicious code in bioql PyPI...

EUVD-2025-15226

Malicious code in bioql PyPI...

EUVD-2023-53201

Malicious code in bioql PyPI...

CVE-2025-4223

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘loginurl’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-13427

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

CVE-2025-4223

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘loginurl’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-4223

The Page Builder: Pagelayer WordPress plugin (CVE-2025-4223) is vulnerable to Reflected XSS via the login_url parameter in versions up to 2.0.0 due to insufficient input sanitization and output escaping. Attacks require a user to click a crafted link and execute within that user’s context; no exp...

CVE-2025-4223 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘loginurl’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-4223 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘loginurl’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for...