EUVD-2023-45669

Malicious code in bioql PyPI...

EUVD-2022-4581

Malicious code in bioql PyPI...

EUVD-2025-7077

Malicious code in bioql PyPI...

EUVD-2024-47117

Malicious code in bioql PyPI...

EUVD-2022-52912

Malicious code in bioql PyPI...

EUVD-2022-3286

Malicious code in bioql PyPI...

EUVD-2024-54848

Malicious code in bioql PyPI...

EUVD-2023-27874

Malicious code in bioql PyPI...

EUVD-2022-48587

Malicious code in bioql PyPI...

EUVD-2025-21377

Malicious code in bioql PyPI...

EUVD-2024-53739

Malicious code in bioql PyPI...

EUVD-2025-7206

Malicious code in bioql PyPI...

EUVD-2024-30385

Malicious code in bioql PyPI...

EUVD-2022-7212

Malicious code in bioql PyPI...

EUVD-2024-3332

Malicious code in bioql PyPI...

EUVD-2023-27898

Malicious code in bioql PyPI...

EUVD-2024-16872

Malicious code in bioql PyPI...

PT-2025-40480

Name of the Vulnerable Software and Affected Versions Easy Elementor Addons versions prior to 2.2.8 Description The Easy Elementor Addons plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping in several widget...

CVE-2025-40989

CVE-2025-40989 describes a stored cross-site scripting vulnerability in Ekushey CRM v5.0 (Creativeitem) caused by insufficient validation of user input in the POST endpoint dealing with the applicant’s message, specifically the API path that includes the message parameter. The affected component ...

CVE-2025-6941

CVE-2025-6941 is a stored XSS in the WordPress plugin LatePoint (Calendar Booking Plugin for Appointments and Events). The issue arises from insufficient input sanitization/escaping in the id parameter of the latepoint_resources shortcode, affecting all versions up to and including 5.1.94. Exploi...