EUVD-2025-11610

Malicious code in bioql PyPI...

EUVD-2024-28162

Malicious code in bioql PyPI...

EUVD-2024-28412

Malicious code in bioql PyPI...

EUVD-2024-30621

Malicious code in bioql PyPI...

EUVD-2023-38078

Malicious code in bioql PyPI...

EUVD-2022-49584

Malicious code in bioql PyPI...

EUVD-2022-48267

Malicious code in bioql PyPI...

EUVD-2024-29131

Malicious code in bioql PyPI...

EUVD-2025-15258

Malicious code in bioql PyPI...

EUVD-2023-52351

Malicious code in bioql PyPI...

EUVD-2024-29150

Malicious code in bioql PyPI...

EUVD-2025-15265

Malicious code in bioql PyPI...

CVE-2025-49287

Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through = 2.2.8...

CVE-2025-49287

Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through = 2.2.8...

CVE-2025-49287

CVE-2025-49287 : A Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce affects Product Feed for WooCommerce (Google Shopping Feed, Pinterest Feed, TikTok Ads & More) up to version 2.2.8. The CVSSv3.1 base score is 4.3 (Medium); attack vector is network, with low attack c...

CVE-2025-49287 WordPress Product Feed for WooCommerce plugin <= 2.2.8 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through = 2.2.8...

PT-2025-24222 · Woocommerce · Webtoffee Product Feed For Woocommerce

Name of the Vulnerable Software and Affected Versions: WebToffee Product Feed for WooCommerce versions 2.2.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

CVE-2025-24657

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee Wishlist for WooCommerce wt-woocommerce-wishlist allows Stored XSS.This issue affects Wishlist for WooCommerce: from n/a through = 2.1.2...

CVE-2024-31235

Cross-Site Request Forgery CSRF vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.5...

CVE-2024-30492

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.2...