EUVD-2026-96528

Unauthenticated PHP Object Injection in Qwery = 3.6.1 versions...

CVE-2026-78533

The Qwery WordPress theme (versions

WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Qwery versions = 3.6.1...

MAL-2026-1226 Malicious code in qwery-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4861116d64db41be8bae04818ecc9f3542fe4bc30055d57588f6f23c11149f3 Obfuscated downloader of encrypted code, compiled to native binary. The remote URL has to be provided to the binary. Likely impersonates legitimate npm library...

Malicious code in qwery-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4861116d64db41be8bae04818ecc9f3542fe4bc30055d57588f6f23c11149f3 Obfuscated downloader of encrypted code, compiled to native binary. The remote URL has to be provided to the binary. Likely impersonates legitimate npm library...

WordPress Qwery Theme <= 3.4.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Qwery versions = 3.4.1...

WordPress Qwery Theme <= 3.4.1 is vulnerable to Local File Inclusion

Software Qwery Type Theme Vulnerable versions = 3.4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 4514eb2fc301 Credits Bonds Patchstack Alliance Required privilege...