EUVD-2024-53872

Malicious code in bioql PyPI...

EUVD-2024-16388

Malicious code in bioql PyPI...

EUVD-2024-32894

Malicious code in bioql PyPI...

EUVD-2024-47176

Malicious code in bioql PyPI...

EUVD-2024-51128

Malicious code in bioql PyPI...

EUVD-2024-31798

Malicious code in bioql PyPI...

EUVD-2024-17388

Malicious code in bioql PyPI...

EUVD-2025-22984

Malicious code in bioql PyPI...

EUVD-2025-22398

Malicious code in bioql PyPI...

EUVD-2024-34216

Malicious code in bioql PyPI...

EUVD-2025-13652

Malicious code in bioql PyPI...

EUVD-2025-7401

Malicious code in bioql PyPI...

EUVD-2024-33438

Malicious code in bioql PyPI...

EUVD-2024-50620

Malicious code in bioql PyPI...

EUVD-2024-50704

Malicious code in bioql PyPI...

EUVD-2024-17419

Malicious code in bioql PyPI...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9212

The CVE refers to WP Dispatcher for WordPress (plugin) with Arbitrary File Upload via wp_dispatcher_process_upload() in all versions up to 1.2.0. Affected: WordPress plugin WP Dispatcher; attacker must be authenticated at Subscriber level or higher. Impact: upload of arbitrary files that could le...

CVE-2025-10305

CVE-2025-10305 documents a vulnerability in the WordPress Secure Passkeys plugin (versions up to and including 1.2.1) where delete_passkey() and passkeys_list() lack proper authorization checks. This allows authenticated users with Subscriber+ privileges to view and delete passkeys. The issue has...

CVE-2025-9215

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the filedownload function. This makes it possible for authenticated attackers, with...