EUVD-2025-11990

Malicious code in bioql PyPI...

WordPress COVID-19 (Coronavirus) Update Your Customers plugin <= 1.5.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin COVID-19 Coronavirus Update Your Customers versions = 1.5.1...

CVE-2025-46523

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devignstudiosltd COVID-19 Coronavirus Update Your Customers covid-19-alert allows Stored XSS.This issue affects COVID-19 Coronavirus Update Your Customers: from n/a through = 1.5.1...

CVE-2025-46523

CVE-2025-46523 concerns a stored XSS in the WordPress plugin “COVID-19 (Coronavirus) Update Your Customers” by devignstudiosltd, affecting versions up to 1.5.1. The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Connected sourc...