EUVD-2021-29120

Malicious code in bioql PyPI...

EUVD-2022-53495

Malicious code in bioql PyPI...

EUVD-2023-44460

Malicious code in bioql PyPI...

EUVD-2025-1950

Malicious code in bioql PyPI...

EUVD-2023-44427

Malicious code in bioql PyPI...

EUVD-2022-38293

Malicious code in bioql PyPI...

EUVD-2024-34700

Malicious code in bioql PyPI...

EUVD-2025-16267

Malicious code in bioql PyPI...

EUVD-2024-26143

Malicious code in bioql PyPI...

EUVD-2022-51606

Malicious code in bioql PyPI...

EUVD-2025-15097

Malicious code in bioql PyPI...

EUVD-2024-47782

Malicious code in bioql PyPI...

EUVD-2024-40819

Malicious code in bioql PyPI...

EUVD-2022-52460

Malicious code in bioql PyPI...

EUVD-2024-34033

Malicious code in bioql PyPI...

CVE-2025-9875

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

EUVD-2025-32278

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2025-9875 Event Tickets, RSVPs, Calendar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2025-9875 Event Tickets, RSVPs, Calendar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

PT-2025-40597

Name of the Vulnerable Software and Affected Versions OpenSupports versions 4.11.0 Description The application’s API endpoint, /api/staff/get-new-tickets, directly incorporates the user-supplied parameter departmentId into a SQL query without proper sanitization. This allows an authenticated staf...