EUVD-2025-7094

Malicious code in bioql PyPI...

EUVD-2022-41582

Malicious code in bioql PyPI...

EUVD-2025-25062

Malicious code in bioql PyPI...

EUVD-2022-42419

Malicious code in bioql PyPI...

EUVD-2024-21484

Malicious code in bioql PyPI...

EUVD-2022-31184

Malicious code in bioql PyPI...

EUVD-2024-21426

Malicious code in bioql PyPI...

EUVD-2023-50647

Malicious code in bioql PyPI...

EUVD-2024-32000

Malicious code in bioql PyPI...

EUVD-2022-30262

Malicious code in bioql PyPI...

EUVD-2022-46319

Malicious code in bioql PyPI...

EUVD-2024-49497

Malicious code in bioql PyPI...

EUVD-2024-47433

Malicious code in bioql PyPI...

EUVD-2024-21264

Malicious code in bioql PyPI...

CVE-2025-9561 AP Background 3.8.1 - 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload via advParallaxBackAdminSaveSlider Function

The AP Background plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization and insufficient file validation within the advParallaxBackAdminSaveSlider handler in versions 3.8.1 to 3.8.2. This makes it possible for authenticated attackers, with Subscriber-level acce...

CVE-2025-9561 AP Background 3.8.1 - 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload via advParallaxBackAdminSaveSlider Function

The AP Background plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization and insufficient file validation within the advParallaxBackAdminSaveSlider handler in versions 3.8.1 to 3.8.2. This makes it possible for authenticated attackers, with Subscriber-level acce...

EUVD-2025-32248

The AP Background plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization and insufficient file validation within the advParallaxBackAdminSaveSlider handler in versions 3.8.1 to 3.8.2. This makes it possible for authenticated attackers, with Subscriber-level acce...

CVE-2025-9561

CVE-2025-9561 affects the WordPress AP Background plugin (versions 3.8.1–3.8.2). The issue is an arbitrary file upload vulnerability due to missing authorization and insufficient file validation in advParallaxBackAdminSaveSlider(), allowing authenticated attackers with Subscriber+ access to uploa...

CVE-2025-9212

The CVE refers to WP Dispatcher for WordPress (plugin) with Arbitrary File Upload via wp_dispatcher_process_upload() in all versions up to 1.2.0. Affected: WordPress plugin WP Dispatcher; attacker must be authenticated at Subscriber level or higher. Impact: upload of arbitrary files that could le...

CVE-2025-9212 WP Dispatcher <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...