EUVD-2025-28553

Malicious code in bioql PyPI...

EUVD-2025-10768

Malicious code in bioql PyPI...

EUVD-2022-35431

Malicious code in bioql PyPI...

EUVD-2023-53917

Malicious code in bioql PyPI...

EUVD-2023-38485

Malicious code in bioql PyPI...

EUVD-2024-33184

Malicious code in bioql PyPI...

EUVD-2019-15027

Malicious code in bioql PyPI...

EUVD-2025-31686

Malicious code in bioql PyPI...

EUVD-2022-43313

Malicious code in bioql PyPI...

EUVD-2024-26783

Malicious code in bioql PyPI...

EUVD-2016-5183

Malicious code in bioql PyPI...

EUVD-2025-21600

Malicious code in bioql PyPI...

EUVD-2016-1002

Malicious code in bioql PyPI...

EUVD-2016-2202

Malicious code in bioql PyPI...

EUVD-2023-51917

Malicious code in bioql PyPI...

CVE-2025-8559

CVE-2025-8559 affects the WordPress plugin All in One Music Player. A path traversal vulnerability via the theme parameter exists in versions up to 1.3.1, enabling authenticated attackers with Contributor+ privileges to read server files. Public sources in CNVD, CVE lists, and PT-2025-39939 descr...

CVE-2025-8559 All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parameter

The All in One Music Player plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.1 via the 'theme' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which c...

CVE-2025-8559 All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parameter

The All in One Music Player plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.1 via the 'theme' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which c...

PT-2025-39939

Name of the Vulnerable Software and Affected Versions All in One Music Player plugin for WordPress versions prior to 1.3.2 Description The All in One Music Player plugin for WordPress is susceptible to a Path Traversal issue through the theme parameter. This allows authenticated attackers with...

CVE-2025-9203

The Media Player Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtitlessize', 'tracktitle', and 'trackartistname' parameters in version 1.0.5. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This...