EUVD-2025-28783

Malicious code in bioql PyPI...

CVE-2025-7812: Cross-Site Request Forgery (CSRF)

The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.6. This is due to missing or incorrect nonce validation on the adminExport function. This makes it possible for unauthenticated...