EUVD-2024-51675

Malicious code in bioql PyPI...

EUVD-2025-31693

Malicious code in bioql PyPI...

EUVD-2025-13294

Malicious code in bioql PyPI...

EUVD-2025-9592

Malicious code in bioql PyPI...

EUVD-2024-43967

Malicious code in bioql PyPI...

EUVD-2024-51683

Malicious code in bioql PyPI...

EUVD-2024-46413

Malicious code in bioql PyPI...

EUVD-2024-27448

Malicious code in bioql PyPI...

EUVD-2024-49695

Malicious code in bioql PyPI...

EUVD-2024-34263

Malicious code in bioql PyPI...

EUVD-2024-32247

Malicious code in bioql PyPI...

EUVD-2023-57958

Malicious code in bioql PyPI...

EUVD-2023-59186

Malicious code in bioql PyPI...

CVE-2025-10582

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

CVE-2025-9130 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-10582: Improper Neutralization of Special Elements used in an SQL Command

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

CVE-2025-9876: Improper Neutralization of Input During Web Page Generation

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9204: Improper Neutralization of Input During Web Page Generation

The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field in all versions up to, and including, 1.0.16. This is due to insufficient input sanitization and output escaping on the Youtube Video ID parameter. This makes it possible fo...

CVE-2025-9130: Improper Neutralization of Input During Web Page Generation

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9080: Improper Neutralization of Input During Web Page Generation

The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...