EUVD-2025-28156

Malicious code in bioql PyPI...

EUVD-2025-26027

Malicious code in bioql PyPI...

EUVD-2025-30727

Malicious code in bioql PyPI...

EUVD-2025-20705

Malicious code in bioql PyPI...

EUVD-2025-28513

Malicious code in bioql PyPI...

EUVD-2025-28512

Malicious code in bioql PyPI...

EUVD-2025-27397

Malicious code in bioql PyPI...

EUVD-2024-42401

Malicious code in bioql PyPI...

EUVD-2025-25918

Malicious code in bioql PyPI...

EUVD-2025-31237

Malicious code in bioql PyPI...

EUVD-2025-28519

Malicious code in bioql PyPI...

EUVD-2025-3697

Malicious code in bioql PyPI...

EUVD-2025-24927

Malicious code in bioql PyPI...

EUVD-2024-1640

Malicious code in bioql PyPI...

EUVD-2024-0831

Malicious code in bioql PyPI...

EUVD-2025-0124

Malicious code in bioql PyPI...

EUVD-2024-55007

Malicious code in bioql PyPI...

EUVD-2024-17039

Malicious code in bioql PyPI...

CVE-2025-9129 Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode

The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-tag shortcode in all versions up to, and including, 4.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9884 Mobile Site Redirect <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious w...