EUVD-2024-47826

Malicious code in bioql PyPI...

EUVD-2024-31841

Malicious code in bioql PyPI...

EUVD-2024-33780

Malicious code in bioql PyPI...

EUVD-2025-4804

Malicious code in bioql PyPI...

EUVD-2023-23314

Malicious code in bioql PyPI...

EUVD-2024-54129

Malicious code in bioql PyPI...

EUVD-2024-51748

Malicious code in bioql PyPI...

EUVD-2023-23451

Malicious code in bioql PyPI...

EUVD-2023-33612

Malicious code in bioql PyPI...

EUVD-2024-49703

Malicious code in bioql PyPI...

EUVD-2024-33903

Malicious code in bioql PyPI...

EUVD-2024-50548

Malicious code in bioql PyPI...

EUVD-2024-50620

Malicious code in bioql PyPI...

EUVD-2023-23595

Malicious code in bioql PyPI...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9212

The CVE refers to WP Dispatcher for WordPress (plugin) with Arbitrary File Upload via wp_dispatcher_process_upload() in all versions up to 1.2.0. Affected: WordPress plugin WP Dispatcher; attacker must be authenticated at Subscriber level or higher. Impact: upload of arbitrary files that could le...

CVE-2025-9212: Unrestricted Upload of File with Dangerous Type

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-9561: Unrestricted Upload of File with Dangerous Type

The AP Background plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization and insufficient file validation within the advParallaxBackAdminSaveSlider handler in versions 3.8.1 to 3.8.2. This makes it possible for authenticated attackers, with Subscriber-level acce...

CVE-2025-9194: Missing Authorization

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9993: Improper Control of Filename for Include/Require Statement in PHP Program

The Bei Fen – WordPress Backup Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.2 via the 'task'. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on t...