EUVD-2022-4347

Malicious code in bioql PyPI...

EUVD-2024-18968

Malicious code in bioql PyPI...

EUVD-2023-25998

Malicious code in bioql PyPI...

EUVD-2022-0889

Malicious code in bioql PyPI...

EUVD-2024-18694

Malicious code in bioql PyPI...

EUVD-2022-26747

Malicious code in bioql PyPI...

EUVD-2024-29961

Malicious code in bioql PyPI...

EUVD-2024-18909

Malicious code in bioql PyPI...

EUVD-2023-1991

Malicious code in bioql PyPI...

EUVD-2024-37192

Malicious code in bioql PyPI...

EUVD-2022-26571

Malicious code in bioql PyPI...

EUVD-2025-12322

Malicious code in bioql PyPI...

EUVD-2024-26889

Malicious code in bioql PyPI...

CVE-2025-9889 ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the cmxactivateconnection function. This makes it possible for unauthenticated attackers to bind...

CVE-2025-9889 ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the cmxactivateconnection function. This makes it possible for unauthenticated attackers to bind...

CVE-2025-9889

CVE-2025-9889 : WordPress ContentMX Content Publisher plugin

WordPress plugin ContentMX Content Publisher 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress ContentMX Content Publisher plugin that stems from the cmxactivateconnection function not adequately verifying...

PT-2025-40506

Name of the Vulnerable Software and Affected Versions ContentMX Content Publisher plugin for WordPress versions up to and including 1.0.6 Description The software is susceptible to a Cross-Site Request Forgery CSRF issue. This is caused by a lack of, or incorrect, nonce validation in the cmx...

CVE-2025-4760

An authenticated stored cross-site scripting XSS vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document containing malicious JavaScript,...

CVE-2025-10147

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'moveasoriginalfile' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the...