EUVD-2023-52109

Malicious code in bioql PyPI...

EUVD-2024-45360

Malicious code in bioql PyPI...

EUVD-2022-43036

Malicious code in bioql PyPI...

EUVD-2024-31401

Malicious code in bioql PyPI...

EUVD-2025-3348

Malicious code in bioql PyPI...

EUVD-2024-16188

Malicious code in bioql PyPI...

EUVD-2025-11774

Malicious code in bioql PyPI...

EUVD-2022-0843

Malicious code in bioql PyPI...

EUVD-2022-24863

Malicious code in bioql PyPI...

EUVD-2024-52430

Malicious code in bioql PyPI...

EUVD-2022-34642

Malicious code in bioql PyPI...

EUVD-2025-3325

Malicious code in bioql PyPI...

CVE-2025-9213

The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to missing or incorrect nonce validation on the 'handleToken' function. This makes it possible for unauthenticated attackers to update a user's authorization token via a forged...

CVE-2025-9630 WP SinoType <= 1.0 - Cross-Site Request Forgery

The WP SinoType plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the sinotypeconfig function. This makes it possible for unauthenticated attackers to modify typography settings via a...

CVE-2025-10311

CVE-2025-10311 affects the WordPress plugin Comment Info Detector (versions

WordPress AP Background plugin <= 3.8.2 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin AP Background versions = 3.8.2...

WordPress plugin The Ultimate Viral Quiz 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an applicatio...

PT-2025-40472

Name of the Vulnerable Software and Affected Versions PayPal Forms plugin for WordPress versions up to and including 1.0.3 Description The PayPal Forms plugin for WordPress is susceptible to Cross-Site Request Forgery. This is a result of a lack of nonce validation during form creation and...

PT-2025-40507

Name of the Vulnerable Software and Affected Versions Restrict User Registration plugin for WordPress versions prior to 1.0.2 Description The Restrict User Registration plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by a lack of proper nonce validation within th...

Canonical LXD CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

Description OIDC authentication uses cookies with the SameSite=Strict attribute, preventing cookies from being sent with requests from other sites. Therefore, CSRF does not occur as long as web services in a Same Site relationship same eTLD+1 with the origin running LXD-UI are trusted. However,...