EUVD-2023-12757

Malicious code in bioql PyPI...

EUVD-2023-12739

Malicious code in bioql PyPI...

EUVD-2023-12743

Malicious code in bioql PyPI...

EUVD-2023-12755

Malicious code in bioql PyPI...

EUVD-2023-12753

Malicious code in bioql PyPI...

EUVD-2023-12752

Malicious code in bioql PyPI...

EUVD-2023-12758

Malicious code in bioql PyPI...

EUVD-2023-12751

Malicious code in bioql PyPI...

EUVD-2023-12750

Malicious code in bioql PyPI...

Malicious code in wicked-executor (npm)

The package wicked-executor was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in wicked-external-roblox (npm)

The package wicked-external-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-39264 Malicious code in wicked-external-roblox (npm)

The package wicked-external-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in wicked-external-fivem (npm)

The package wicked-external-fivem was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-39263 Malicious code in wicked-external-fivem (npm)

The package wicked-external-fivem was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-39262 Malicious code in wicked-executor (npm)

The package wicked-executor was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2023-0727

The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajaxdeletefolder function. This makes it possible for unauthenticated attackers to invoke this function via...

CVE-2023-0723

The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajaxmoveobject function. This makes it possible for unauthenticated attackers to invoke this function via forg...

CVE-2023-0684

The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajaxunassignfolders function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke...

CVE-2023-0712

The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajaxmoveobject function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this...

CVE-2023-0730

The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajaxsavefolderorder function. This makes it possible for unauthenticated attackers to invoke this function via...