EUVD-2022-1752

Malicious code in bioql PyPI...

EUVD-2022-3963

Malicious code in bioql PyPI...

EUVD-2023-36294

Malicious code in bioql PyPI...

EUVD-2022-5735

Malicious code in bioql PyPI...

EUVD-2022-44468

Malicious code in bioql PyPI...

EUVD-2022-1956

Malicious code in bioql PyPI...

EUVD-2025-26409

Malicious code in bioql PyPI...

EUVD-2022-2227

Malicious code in bioql PyPI...

EUVD-2022-0813

Malicious code in bioql PyPI...

EUVD-2022-4100

Malicious code in bioql PyPI...

EUVD-2024-3277

Malicious code in bioql PyPI...

EUVD-2025-26411

Malicious code in bioql PyPI...

EUVD-2023-36475

Malicious code in bioql PyPI...

EUVD-2023-2356

Malicious code in bioql PyPI...

EUVD-2023-2165

Malicious code in bioql PyPI...

CVE-2025-9194

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9194

CVE-2025-9194 concerns the WordPress plugin Constructor (versions up to 1.6.5). The issue is a missing capability check in the clean() function, enabling authenticated attackers with Subscriber-level access or higher to trigger a theme clean and modify data. Public sources (e.g., PT-2025-40485) n...

EUVD-2025-32249

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...