EUVD-2025-31249

Malicious code in bioql PyPI...

WordPress AR For WordPress plugin <= 8.34 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Abu Hurayra in WordPress Plugin AR For WordPress versions = 8.34...

CVE-2025-60156

The CVE-2025-60156 entry concerns WordPress plugin AR For WordPress (vulnerable up to 7.98). Several connected sources describe a CSRF vulnerability that can enable an attacker to upload a Web Shell to the target web server. The underlying issue is that requests are not properly validated, allowi...

WordPress All-in-One WP Migration and Backup plugin <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Import vulnerability discovered by Jack Pas Dark. in WordPress Plugin All-in-One WP Migration versions = 7.97...