423 matches found
EUVD-2023-40562
Malicious code in bioql PyPI...
EUVD-2022-49213
Malicious code in bioql PyPI...
EUVD-2023-49642
Malicious code in bioql PyPI...
EUVD-2023-43796
Malicious code in bioql PyPI...
EUVD-2023-40563
Malicious code in bioql PyPI...
EUVD-2023-49649
Malicious code in bioql PyPI...
EUVD-2023-49644
Malicious code in bioql PyPI...
EUVD-2023-39071
Malicious code in bioql PyPI...
EUVD-2023-52246
Malicious code in bioql PyPI...
EUVD-2023-33041
Malicious code in bioql PyPI...
EUVD-2022-39154
Malicious code in bioql PyPI...
EUVD-2023-33043
Malicious code in bioql PyPI...
EUVD-2023-49648
Malicious code in bioql PyPI...
EUVD-2023-39068
Malicious code in bioql PyPI...
EUVD-2025-32284
Malicious code in bioql PyPI...
EUVD-2023-49645
Malicious code in bioql PyPI...
CVE-2025-9130
The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9130 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode
The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9130 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode
The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9130
CVE-2025-9130 refers to the WordPress Unify plugin vulnerable to Stored XSS via the unify_checkout shortcode in versions up to and including 3.4.7. The issue arises from insufficient input sanitization and output escaping on user-supplied attributes, enabling authenticated attackers with contribu...