EUVD-2021-8153

Malicious code in bioql PyPI...

EUVD-2025-6287

Malicious code in bioql PyPI...

EUVD-2025-27997

Malicious code in bioql PyPI...

EUVD-2022-26769

Malicious code in bioql PyPI...

EUVD-2023-42960

Malicious code in bioql PyPI...

EUVD-2021-30940

Malicious code in bioql PyPI...

EUVD-2022-7337

Malicious code in bioql PyPI...

EUVD-2023-23321

Malicious code in bioql PyPI...

EUVD-2024-33462

Malicious code in bioql PyPI...

EUVD-2025-5039

Malicious code in bioql PyPI...

EUVD-2021-28472

Malicious code in bioql PyPI...

EUVD-2024-54702

Malicious code in bioql PyPI...

EUVD-2024-38753

Malicious code in bioql PyPI...

EUVD-2023-38241

Malicious code in bioql PyPI...

EUVD-2021-30149

Malicious code in bioql PyPI...

EUVD-2021-32280

Malicious code in bioql PyPI...

EUVD-2024-39188

Malicious code in bioql PyPI...

CVE-2025-9213

The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to missing or incorrect nonce validation on the 'handleToken' function. This makes it possible for unauthenticated attackers to update a user's authorization token via a forged...

CVE-2025-8669 Customify <= 0.4.11 - Cross-Site Request Forgery

The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the resetcustomizesection function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged...

CVE-2025-10309

CVE-2025-10309 pertains to the PayPal Forms plugin for WordPress, vulnerable to Cross-Site Forgery (CSRF) in all versions up to 1.0.3 due to missing nonce validation on form creation/management. This could allow unauthenticated attackers to create PayPal forms and modify payment settings by trick...