EUVD-2022-5322

Malicious code in bioql PyPI...

EUVD-2024-40097

Malicious code in bioql PyPI...

EUVD-2024-36046

Malicious code in bioql PyPI...

EUVD-2024-33080

Malicious code in bioql PyPI...

EUVD-2024-22941

Malicious code in bioql PyPI...

EUVD-2025-19191

Malicious code in bioql PyPI...

EUVD-2025-27541

Malicious code in bioql PyPI...

EUVD-2022-7716

Malicious code in bioql PyPI...

EUVD-2025-7207

Malicious code in bioql PyPI...

EUVD-2024-17060

Malicious code in bioql PyPI...

EUVD-2025-21832

Malicious code in bioql PyPI...

EUVD-2022-36989

Malicious code in bioql PyPI...

EUVD-2025-12115

Malicious code in bioql PyPI...

EUVD-2025-12152

Malicious code in bioql PyPI...

EUVD-2023-40556

Malicious code in bioql PyPI...

CVE-2025-9209

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

CVE-2025-9209 RestroPress – Online Food Ordering System 3.0.0 - 3.1.9.2 - Unauthenticated Information Exposure to Authentication Bypass via Forged JWT

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

CVE-2025-9209

The CVE concerns RestroPress – Online Food Ordering System (WordPress) versions 3.0.0–3.1.9.2. Affected endpoint /wp-json/wp/v2/users exposes user private tokens and API data, enabling unauthenticated attackers to forge JWT tokens and authenticate as other users (including admins). This constitut...

CVE-2025-9209 RestroPress – Online Food Ordering System 3.0.0 - 3.1.9.2 - Unauthenticated Information Exposure to Authentication Bypass via Forged JWT

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

EUVD-2025-32281

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...