EUVD-2025-13734

Malicious code in bioql PyPI...

EUVD-2025-28394

Malicious code in bioql PyPI...

EUVD-2025-18938

Malicious code in bioql PyPI...

EUVD-2023-0914

Malicious code in bioql PyPI...

EUVD-2023-1103

Malicious code in bioql PyPI...

EUVD-2023-0876

Malicious code in bioql PyPI...

EUVD-2023-1029

Malicious code in bioql PyPI...

EUVD-2023-0900

Malicious code in bioql PyPI...

EUVD-2023-1123

Malicious code in bioql PyPI...

EUVD-2023-1094

Malicious code in bioql PyPI...

EUVD-2023-1021

Malicious code in bioql PyPI...

CVE-2025-9889 ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the cmxactivateconnection function. This makes it possible for unauthenticated attackers to bind...

Advisory ROSA-SA-2025-3014

software: cert-sh-functions 1.0.6 WASP: ROSA-CHROME unaffected versions = cert-sh-functions-1.0.6-5 affected versions cert-sh-functions-1.0.6-5 CVE-ID: CVE-2022-30550 BDU-ID: 2022-04273 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the passdb account database of the Dovecot mail server is relate...

CVE-2025-58262

Cross-Site Request Forgery CSRF vulnerability in WPDirectoryKit Sweet Energy Efficiency sweet-energy-efficiency allows Stored XSS.This issue affects Sweet Energy Efficiency: from n/a through = 1.0.8...

CVE-2025-57949

Missing Authorization vulnerability in oggix Ongkoskirim.id ongkoskirim-id allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ongkoskirim.id: from n/a through = 1.0.6...

CVE-2025-57949

CVE-2025-57949 describes a Missing Authorization vulnerability in the Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for WooCommerce plugin (Ongkoskirim-id). Affected range: n/a to 1.0.6. The issue relates to broken access control enabling unauthorized updates to shipping options, per the Initial D...

CVE-2025-58262 WordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPDirectoryKit Sweet Energy Efficiency sweet-energy-efficiency allows Stored XSS.This issue affects Sweet Energy Efficiency: from n/a through = 1.0.8...

PT-2025-38925

Name of the Vulnerable Software and Affected Versions wpdirectorykit Sweet Energy Efficiency versions through 1.0.6 Description A Cross-Site Request Forgery CSRF issue exists in wpdirectorykit Sweet Energy Efficiency, which also allows Stored Cross-Site Scripting XSS. Recommendations Update...

CVE-2025-53571

Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through = 1.0.6...

CVE-2025-53571

Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through = 1.0.6...