PT-2025-43276

Name of the Vulnerable Software and Affected Versions AmentoTech Taskbot versions through 6.4 Description AmentoTech Taskbot contains a flaw related to improper limitation of a pathname to a restricted directory, which allows for path traversal. This could potentially allow an attacker to access...

EUVD-2025-17506

Malicious code in bioql PyPI...

EUVD-2025-8383

Malicious code in bioql PyPI...

CVE-2025-31920

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech WP Guppy wp-guppy allows SQL Injection.This issue affects WP Guppy: from n/a through = 4.3.3...

CVE-2025-31920

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech WP Guppy wp-guppy allows SQL Injection.This issue affects WP Guppy: from n/a through = 4.3.3...

CVE-2025-31920 WordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech WP Guppy wp-guppy allows SQL Injection.This issue affects WP Guppy: from n/a through = 4.3.3...

CVE-2025-31920 WordPress WP Guppy <= 4.3.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech WP Guppy allows SQL Injection. This issue affects WP Guppy: from n/a through 4.3.3...

CVE-2025-31920

CVE-2025-31920 describes an SQL Injection vulnerability in WordPress WP Guppy up to version 4.3.3, arising from improper neutralization of input in SQL commands. Multiple connected sources confirm the affected software and the root cause (SQL injection via WP Guppy). The CVSS base score is 8.5 (H...

PT-2025-24490 · Amentotech · Amentotech Wp Guppy

Name of the Vulnerable Software and Affected Versions: AmentoTech WP Guppy versions n/a through 4.3.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2025-30775

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows SQL Injection.This issue affects WPGuppy: from n/a through = 1.1.3...

CVE-2025-30775

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows SQL Injection.This issue affects WPGuppy: from n/a through = 1.1.3...

CVE-2025-30775

CVE-2025-30775 is a SQL Injection vulnerability in AmentoTech WPGuppy for WordPress. Affected: WPGuppy versions up to and including 1.1.3 (affected range noted as n/a through 1.1.3). Root cause: improper neutralization of special elements in SQL commands. Impact (per CVSS 3.1 metrics): unauthoriz...

CVE-2025-30775 WordPress WPGuppy plugin <= 1.1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows SQL Injection.This issue affects WPGuppy: from n/a through = 1.1.3...

CVE-2025-30775 WordPress WPGuppy plugin <= 1.1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows SQL Injection.This issue affects WPGuppy: from n/a through = 1.1.3...