EUVD-2023-29427

Malicious code in bioql PyPI...

EUVD-2024-45883

Malicious code in bioql PyPI...

EUVD-2024-40632

Malicious code in bioql PyPI...

EUVD-2024-26783

Malicious code in bioql PyPI...

EUVD-2023-29436

Malicious code in bioql PyPI...

EUVD-2024-16884

Malicious code in bioql PyPI...

EUVD-2024-40633

Malicious code in bioql PyPI...

EUVD-2024-30499

Malicious code in bioql PyPI...

EUVD-2024-26889

Malicious code in bioql PyPI...

EUVD-2024-30598

Malicious code in bioql PyPI...

EUVD-2023-29025

Malicious code in bioql PyPI...

EUVD-2024-29964

Malicious code in bioql PyPI...

EUVD-2024-16892

Malicious code in bioql PyPI...

EUVD-2023-29434

Malicious code in bioql PyPI...

EUVD-2024-29960

Malicious code in bioql PyPI...

EUVD-2025-1752

Malicious code in bioql PyPI...

CVE-2025-10147

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'moveasoriginalfile' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

CVE-2025-58227

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alexander Lueken Podlove Subscribe button podlove-subscribe-button allows Stored XSS.This issue affects Podlove Subscribe button: from n/a through = 1.3.11...

CVE-2025-10147

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'moveasoriginalfile' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

CVE-2025-10147

Podlove Podcast Publisher (WordPress) is affected by CVE-2025-10147 due to missing file type validation in move_as_original_file, allowing unauthenticated arbitrary file uploads and possible remote code execution in all versions up to 4.2.6. The vulnerability is mitigated by upgrading to 4.2.6 or...