EUVD-2022-28896

Malicious code in bioql PyPI...

CVE-2022-44279

Garage Management System v1.0 is vulnerable to Cross Site Scripting XSS via /garage/phpaction/createBrand.php...

Perfect Brands for WooCommerce < 2.0.5 - Subscriber+ Arbitrary Brand Creation

The plugin does not have authorisation and CSRF checks in some of its AJAX actions, which could allow any authenticated users, such as subscriber to create arbitrary brands...