EUVD-2025-12791

Malicious code in bioql PyPI...

EUVD-2025-12108

Malicious code in bioql PyPI...

EUVD-2022-42905

Malicious code in bioql PyPI...

EUVD-2022-35204

Malicious code in bioql PyPI...

EUVD-2025-12529

Malicious code in bioql PyPI...

EUVD-2022-43168

Malicious code in bioql PyPI...

EUVD-2025-13105

Malicious code in bioql PyPI...

EUVD-2024-17388

Malicious code in bioql PyPI...

EUVD-2024-17444

Malicious code in bioql PyPI...

EUVD-2024-16388

Malicious code in bioql PyPI...

EUVD-2025-12804

Malicious code in bioql PyPI...

EUVD-2023-54649

Malicious code in bioql PyPI...

EUVD-2024-17585

Malicious code in bioql PyPI...

EUVD-2024-50683

Malicious code in bioql PyPI...

CVE-2025-9194

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-10212

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9194

CVE-2025-9194 concerns the WordPress plugin Constructor (versions up to 1.6.5). The issue is a missing capability check in the clean() function, enabling authenticated attackers with Subscriber-level access or higher to trigger a theme clean and modify data. Public sources (e.g., PT-2025-40485) n...

EUVD-2025-32249

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-10212 SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...