EUVD-2025-20387

Malicious code in bioql PyPI...

EUVD-2024-53872

Malicious code in bioql PyPI...

EUVD-2023-58961

Malicious code in bioql PyPI...

EUVD-2024-48100

Malicious code in bioql PyPI...

EUVD-2024-49948

Malicious code in bioql PyPI...

EUVD-2024-54126

Malicious code in bioql PyPI...

EUVD-2025-12331

Malicious code in bioql PyPI...

EUVD-2024-26996

Malicious code in bioql PyPI...

EUVD-2021-29526

Malicious code in bioql PyPI...

EUVD-2024-52772

Malicious code in bioql PyPI...

EUVD-2025-4848

Malicious code in bioql PyPI...

EUVD-2024-51569

Malicious code in bioql PyPI...

EUVD-2025-13588

Malicious code in bioql PyPI...

CVE-2025-44007

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

CVE-2025-44007

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

CVE-2025-9859

The Fintelligence Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fintelligence-calculator' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2025-9204

The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field in all versions up to, and including, 1.0.16. This is due to insufficient input sanitization and output escaping on the Youtube Video ID parameter. This makes it possible fo...

CVE-2025-10053 TableGen – Data Table Generator <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The TableGen – Data Table Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-9080 Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...

EUVD-2025-32278

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...