EUVD-2025-7392

Malicious code in bioql PyPI...

EUVD-2025-4547

Malicious code in bioql PyPI...

EUVD-2024-32217

Malicious code in bioql PyPI...

EUVD-2024-32936

Malicious code in bioql PyPI...

EUVD-2025-28800

Malicious code in bioql PyPI...

EUVD-2024-33030

Malicious code in bioql PyPI...

EUVD-2024-54144

Malicious code in bioql PyPI...

EUVD-2025-24199

Malicious code in bioql PyPI...

EUVD-2024-48455

Malicious code in bioql PyPI...

EUVD-2025-7361

Malicious code in bioql PyPI...

EUVD-2024-44093

Malicious code in bioql PyPI...

EUVD-2025-4622

Malicious code in bioql PyPI...

EUVD-2025-6029

Malicious code in bioql PyPI...

CVE-2025-10582

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

CVE-2025-9130 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-10165: Improper Neutralization of Input During Web Page Generation

The AP Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advparallaxback' shortcode in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9876: Improper Neutralization of Input During Web Page Generation

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9204: Improper Neutralization of Input During Web Page Generation

The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field in all versions up to, and including, 1.0.16. This is due to insufficient input sanitization and output escaping on the Youtube Video ID parameter. This makes it possible fo...

CVE-2025-9130: Improper Neutralization of Input During Web Page Generation

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9080: Improper Neutralization of Input During Web Page Generation

The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...