EUVD-2022-50181

Malicious code in bioql PyPI...

EUVD-2023-35286

Malicious code in bioql PyPI...

EUVD-2022-24949

Malicious code in bioql PyPI...

EUVD-2025-31227

Malicious code in bioql PyPI...

EUVD-2024-49422

Malicious code in bioql PyPI...

EUVD-2022-31603

Malicious code in bioql PyPI...

EUVD-2024-34781

Malicious code in bioql PyPI...

EUVD-2023-2848

Malicious code in bioql PyPI...

EUVD-2022-29613

Malicious code in bioql PyPI...

EUVD-2024-1640

Malicious code in bioql PyPI...

EUVD-2025-28502

Malicious code in bioql PyPI...

EUVD-2021-33935

Malicious code in bioql PyPI...

EUVD-2023-27819

Malicious code in bioql PyPI...

EUVD-2023-56101

Malicious code in bioql PyPI...

EUVD-2023-46195

Malicious code in bioql PyPI...

CVE-2025-9200 Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2025-9200

CVE-2025-9200 affects the WordPress plugin “Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App”. The issue is an unauthenticated SQL Injection via nh_ynaa_comments() present in all versions up to 0.8.8.8, caused by insufficient escaping of user-supplied input and inadequa...

CVE-2025-9200 Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

PT-2025-40487

Name of the Vulnerable Software and Affected Versions Blappsta Mobile App Plugin versions prior to 0.8.8.9 Description The Blappsta Mobile App Plugin for WordPress is susceptible to SQL Injection due to inadequate input sanitization and query preparation. Specifically, the nh ynaa comments functi...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...