EUVD-2022-45205

Malicious code in bioql PyPI...

EUVD-2023-40285

Malicious code in bioql PyPI...

EUVD-2025-3264

Malicious code in bioql PyPI...

EUVD-2024-54848

Malicious code in bioql PyPI...

EUVD-2025-8187

Malicious code in bioql PyPI...

EUVD-2023-50451

Malicious code in bioql PyPI...

EUVD-2024-41546

Malicious code in bioql PyPI...

EUVD-2023-56385

Malicious code in bioql PyPI...

EUVD-2023-42318

Malicious code in bioql PyPI...

EUVD-2024-30370

Malicious code in bioql PyPI...

EUVD-2025-25909

Malicious code in bioql PyPI...

EUVD-2023-42724

Malicious code in bioql PyPI...

EUVD-2023-48114

Malicious code in bioql PyPI...

EUVD-2023-29903

Malicious code in bioql PyPI...

EUVD-2024-0078

Malicious code in bioql PyPI...

EUVD-2022-28005

Malicious code in bioql PyPI...

EUVD-2024-46879

Malicious code in bioql PyPI...

PT-2025-40480

Name of the Vulnerable Software and Affected Versions Easy Elementor Addons versions prior to 2.2.8 Description The Easy Elementor Addons plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping in several widget...

CVE-2025-40989

CVE-2025-40989 describes a stored cross-site scripting vulnerability in Ekushey CRM v5.0 (Creativeitem) caused by insufficient validation of user input in the POST endpoint dealing with the applicant’s message, specifically the API path that includes the message parameter. The affected component ...

CVE-2025-6941

CVE-2025-6941 is a stored XSS in the WordPress plugin LatePoint (Calendar Booking Plugin for Appointments and Events). The issue arises from insufficient input sanitization/escaping in the id parameter of the latepoint_resources shortcode, affecting all versions up to and including 5.1.94. Exploi...