EUVD-2024-27868

Malicious code in bioql PyPI...

EUVD-2024-27105

Malicious code in bioql PyPI...

EUVD-2024-27244

Malicious code in bioql PyPI...

EUVD-2024-27104

Malicious code in bioql PyPI...

EUVD-2022-34774

Malicious code in bioql PyPI...

EUVD-2024-40078

Malicious code in bioql PyPI...

EUVD-2024-27107

Malicious code in bioql PyPI...

EUVD-2022-34940

Malicious code in bioql PyPI...

EUVD-2023-56122

Malicious code in bioql PyPI...

EUVD-2024-38138

Malicious code in bioql PyPI...

WordPress Plugin Beaver Builder Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Beaver Builder has a cross-site scripting vulnerability that can be exploited by an...

CVE-2025-8897

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'flbuilder' parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2025-8897

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'flbuilder' parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2025-8897

CVE-2025-8897 documents a Reflected Cross-Site Scripting vulnerability in Beaver Builder – WordPress Page Builder (Lite) versions up to 2.9.2.1. The issue arises from insufficient input sanitization and output escaping in the fl_builder parameter, enabling an unauthenticated attacker to inject sc...

CVE-2025-8897 Beaver Builder Plugin (Lite Version) <= 2.9.2.1 - Reflected Cross-Site Scripting

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'flbuilder' parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

PT-2025-34957

Name of the Vulnerable Software and Affected Versions: Beaver Builder – WordPress Page Builder plugin versions prior to 2.9.2.1 Description: The Beaver Builder – WordPress Page Builder plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to insufficient input sanitization and...

WordPress plugin Beaver Builder 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Beaver Builder has a cross-site scripting vulnerability that can be exploited by an...

WordPress Beaver Builder plugin <= 2.9.2.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Jack Pas Dark. in WordPress Plugin Beaver Builder versions = 2.9.2.1...

Malicious code in beaver-logger-paypal (npm)

The package beaver-logger-paypal was found to contain malicious code...

MAL-2025-39898 Malicious code in xo-beaver (npm)

The package xo-beaver was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f47822e91a268b85634963cc1c620bf45c186418ab782e91759b54cb3585ad44 This package installs a dependency hosted on a custom domain that runs an info...