EUVD-2025-19383

Malicious code in bioql PyPI...

EUVD-2024-49695

Malicious code in bioql PyPI...

EUVD-2024-27736

Malicious code in bioql PyPI...

EUVD-2025-13998

Malicious code in bioql PyPI...

EUVD-2024-50184

Malicious code in bioql PyPI...

EUVD-2024-34167

Malicious code in bioql PyPI...

EUVD-2023-59258

Malicious code in bioql PyPI...

EUVD-2025-21846

Malicious code in bioql PyPI...

EUVD-2025-13366

Malicious code in bioql PyPI...

EUVD-2024-34284

Malicious code in bioql PyPI...

EUVD-2024-47840

Malicious code in bioql PyPI...

EUVD-2024-34106

Malicious code in bioql PyPI...

EUVD-2024-34263

Malicious code in bioql PyPI...

EUVD-2025-22505

Malicious code in bioql PyPI...

EUVD-2024-44178

Malicious code in bioql PyPI...

EUVD-2024-34276

Malicious code in bioql PyPI...

CVE-2025-9199: Improper Neutralization of Special Elements used in an SQL Command

The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2025-9854: Improper Neutralization of Input During Web Page Generation

The A Simple Multilanguage Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'asmp-switcher' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2025-10192: Improper Neutralization of Input During Web Page Generation

The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppeeffect' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2025-9130: Improper Neutralization of Input During Web Page Generation

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...