EUVD-2024-16903

Malicious code in bioql PyPI...

EUVD-2024-32894

Malicious code in bioql PyPI...

EUVD-2024-47176

Malicious code in bioql PyPI...

EUVD-2024-50620

Malicious code in bioql PyPI...

EUVD-2024-50704

Malicious code in bioql PyPI...

EUVD-2024-51128

Malicious code in bioql PyPI...

EUVD-2023-23319

Malicious code in bioql PyPI...

EUVD-2025-14369

Malicious code in bioql PyPI...

EUVD-2024-31841

Malicious code in bioql PyPI...

EUVD-2024-17388

Malicious code in bioql PyPI...

EUVD-2024-17419

Malicious code in bioql PyPI...

EUVD-2024-33305

Malicious code in bioql PyPI...

EUVD-2025-4540

Malicious code in bioql PyPI...

EUVD-2024-51001

Malicious code in bioql PyPI...

EUVD-2024-53872

Malicious code in bioql PyPI...

EUVD-2025-7376

Malicious code in bioql PyPI...

EUVD-2023-59669

Malicious code in bioql PyPI...

CVE-2025-8487

CVE-2025-8487 affects Kubio AI Page Builder for WordPress up to version 2.6.3. The vulnerability is caused by a missing capability check on the kubio-image-hub-install-plugin AJAX action, enabling authenticated users with Subscriber-level access and above to install the Image Hub plugin. Exploita...

CVE-2025-0763 Ultimate Classified Listings <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

The Ultimate Classified Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savecustomfields function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access a...

CVE-2025-9219 Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update

The Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updatepostsmtpprooptioncallback'...