EUVD-2024-33030

Malicious code in bioql PyPI...

EUVD-2024-54144

Malicious code in bioql PyPI...

EUVD-2025-24199

Malicious code in bioql PyPI...

EUVD-2025-7361

Malicious code in bioql PyPI...

EUVD-2024-44093

Malicious code in bioql PyPI...

EUVD-2025-4622

Malicious code in bioql PyPI...

EUVD-2025-6029

Malicious code in bioql PyPI...

EUVD-2024-51683

Malicious code in bioql PyPI...

EUVD-2024-49695

Malicious code in bioql PyPI...

EUVD-2024-44103

Malicious code in bioql PyPI...

EUVD-2024-48455

Malicious code in bioql PyPI...

EUVD-2024-32985

Malicious code in bioql PyPI...

EUVD-2024-50982

Malicious code in bioql PyPI...

CVE-2025-10582

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

CVE-2025-9130 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9876: Improper Neutralization of Input During Web Page Generation

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9204: Improper Neutralization of Input During Web Page Generation

The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field in all versions up to, and including, 1.0.16. This is due to insufficient input sanitization and output escaping on the Youtube Video ID parameter. This makes it possible fo...

CVE-2025-9130: Improper Neutralization of Input During Web Page Generation

The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-9080: Improper Neutralization of Input During Web Page Generation

The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...

CVE-2025-7825: Improper Neutralization of Directives in Statically Saved Code

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...