CVE-2025-8726

CVE-2025-8726 affects the WordPress plugin WP Photo Album Plus (versions up to and including 9.0.11.006). The vulnerability is a stored XSS in the wppa_user_upload function, exploitable by authenticated users with Subscriber+ privileges, allowing injection of scripts that run in victims’ browsers...

WordPress Constructor plugin <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean vulnerability

Missing Authorization to Authenticated Subscriber+ Theme Clean vulnerability discovered by Sulabh Jain pentestmonkey11 in WordPress Theme Constructor versions = 1.6.5...

EUVD-2024-36531

Malicious code in bioql PyPI...

EUVD-2024-29248

Malicious code in bioql PyPI...

EUVD-2024-47312

Malicious code in bioql PyPI...

EUVD-2024-46875

Malicious code in bioql PyPI...

EUVD-2024-32576

Malicious code in bioql PyPI...

EUVD-2025-29004

Malicious code in bioql PyPI...

EUVD-2025-29693

Malicious code in bioql PyPI...

EUVD-2024-50964

Malicious code in bioql PyPI...

EUVD-2024-50762

Malicious code in bioql PyPI...

EUVD-2024-49049

Malicious code in bioql PyPI...

EUVD-2024-49407

Malicious code in bioql PyPI...

EUVD-2024-19861

Malicious code in bioql PyPI...

EUVD-2022-15578

Malicious code in bioql PyPI...

EUVD-2024-45094

Malicious code in bioql PyPI...

EUVD-2022-4262

Malicious code in bioql PyPI...

EUVD-2023-46228

Malicious code in bioql PyPI...

EUVD-2025-31692

Malicious code in bioql PyPI...

CVE-2025-9212

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...