EUVD-2025-13652

Malicious code in bioql PyPI...

EUVD-2025-22398

Malicious code in bioql PyPI...

EUVD-2024-16903

Malicious code in bioql PyPI...

EUVD-2024-31841

Malicious code in bioql PyPI...

EUVD-2024-17419

Malicious code in bioql PyPI...

EUVD-2024-34216

Malicious code in bioql PyPI...

EUVD-2025-12491

Malicious code in bioql PyPI...

EUVD-2024-16853

Malicious code in bioql PyPI...

EUVD-2025-22984

Malicious code in bioql PyPI...

EUVD-2025-7557

Malicious code in bioql PyPI...

EUVD-2024-46699

Malicious code in bioql PyPI...

EUVD-2024-53872

Malicious code in bioql PyPI...

EUVD-2024-51001

Malicious code in bioql PyPI...

CVE-2025-8487

CVE-2025-8487 affects Kubio AI Page Builder for WordPress up to version 2.6.3. The vulnerability is caused by a missing capability check on the kubio-image-hub-install-plugin AJAX action, enabling authenticated users with Subscriber-level access and above to install the Image Hub plugin. Exploita...

CVE-2025-0763 Ultimate Classified Listings <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

The Ultimate Classified Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savecustomfields function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access a...

CVE-2025-9219 Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update

The Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updatepostsmtpprooptioncallback'...

CVE-2025-0951

Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquidresetwordpressbefore AJAX in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to deactivat...

CVE-2025-7827 Ni WooCommerce Customer Product Report <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the niwoocpraction function in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-leve...

CVE-2025-9202

CVE-2025-9202 affects ColorMag for WordPress (versions ≤ 4.0.19). The vulnerability arises from a missing capability check in the welcome_notice_import_handler(), allowing authenticated users with Subscriber-level access and above to install the ThemeGrill Demo Importer plugin and modify data. Th...

CVE-2025-8896

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdprcommunicationpreferences' parameter in all versions up to, and including, 3.14.3 due to insufficient input sanitization and...