EUVD-2024-51165

Malicious code in bioql PyPI...

EUVD-2023-23593

Malicious code in bioql PyPI...

EUVD-2023-33610

Malicious code in bioql PyPI...

EUVD-2025-13652

Malicious code in bioql PyPI...

EUVD-2024-32894

Malicious code in bioql PyPI...

EUVD-2024-31798

Malicious code in bioql PyPI...

EUVD-2023-34180

Malicious code in bioql PyPI...

EUVD-2024-50713

Malicious code in bioql PyPI...

EUVD-2025-22398

Malicious code in bioql PyPI...

EUVD-2024-48512

Malicious code in bioql PyPI...

EUVD-2024-16903

Malicious code in bioql PyPI...

EUVD-2024-31841

Malicious code in bioql PyPI...

EUVD-2025-4540

Malicious code in bioql PyPI...

EUVD-2024-34216

Malicious code in bioql PyPI...

EUVD-2024-48316

Malicious code in bioql PyPI...

EUVD-2025-12491

Malicious code in bioql PyPI...

EUVD-2024-50065

Malicious code in bioql PyPI...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9212

The CVE refers to WP Dispatcher for WordPress (plugin) with Arbitrary File Upload via wp_dispatcher_process_upload() in all versions up to 1.2.0. Affected: WordPress plugin WP Dispatcher; attacker must be authenticated at Subscriber level or higher. Impact: upload of arbitrary files that could le...

CVE-2025-10305

CVE-2025-10305 documents a vulnerability in the WordPress Secure Passkeys plugin (versions up to and including 1.2.1) where delete_passkey() and passkeys_list() lack proper authorization checks. This allows authenticated users with Subscriber+ privileges to view and delete passkeys. The issue has...