EUVD-2024-47007

The Easy Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eaflresetsettings AJAX action in all versions up to, and including, 3.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and...

EUVD-2023-57740

Malicious code in bioql PyPI...

EUVD-2024-51072

Malicious code in bioql PyPI...

EUVD-2024-34169

Malicious code in bioql PyPI...

EUVD-2024-32161

Malicious code in bioql PyPI...

EUVD-2024-46745

Malicious code in bioql PyPI...

EUVD-2024-17711

Malicious code in bioql PyPI...

EUVD-2024-50444

Malicious code in bioql PyPI...

EUVD-2025-22984

Malicious code in bioql PyPI...

EUVD-2024-46817

Malicious code in bioql PyPI...

EUVD-2024-46850

Malicious code in bioql PyPI...

EUVD-2024-47863

Malicious code in bioql PyPI...

EUVD-2024-54113

Malicious code in bioql PyPI...

EUVD-2024-50755

Malicious code in bioql PyPI...

EUVD-2025-17368

Malicious code in bioql PyPI...

EUVD-2024-54003

Malicious code in bioql PyPI...

CVE-2025-8068

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to an improper capability check on the 'ajaxtrashtemplates' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, wi...

CVE-2024-9364

The SendGrid for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wpmailplusclearlogs' function in all versions up to, and including, 1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

CVE-2024-1904

The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the searchposts function in all versions up to, and including, 3.2.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to expose...

CVE-2024-0447

The ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the artibotupdate function in all versions up to, and including, 1.1.6. This makes it possible for authenticated attackers, with...