EUVD-2022-39493

Malicious code in bioql PyPI...

EUVD-2025-28894

Malicious code in bioql PyPI...

EUVD-2024-29297

Malicious code in bioql PyPI...

EUVD-2022-26420

Malicious code in bioql PyPI...

EUVD-2024-32188

Malicious code in bioql PyPI...

EUVD-2024-2523

Malicious code in bioql PyPI...

EUVD-2024-49778

Malicious code in bioql PyPI...

EUVD-2023-41955

Malicious code in bioql PyPI...

EUVD-2022-4570

Malicious code in bioql PyPI...

EUVD-2022-33822

Malicious code in bioql PyPI...

EUVD-2021-8180

Malicious code in bioql PyPI...

EUVD-2023-53917

Malicious code in bioql PyPI...

EUVD-2021-8903

Malicious code in bioql PyPI...

EUVD-2022-48016

Malicious code in bioql PyPI...

EUVD-2024-47070

Malicious code in bioql PyPI...

CVE-2025-9018

The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ttupdatetablefunction' and 'ttdeleterecordfunction' functions in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers...

CVE-2025-10266 NewType Infortech｜NUP Portal - SQL Injection

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-9018

The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ttupdatetablefunction' and 'ttdeleterecordfunction' functions in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers...

CVE-2025-9018 Time Tracker <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Limited Data Deletion

The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ttupdatetablefunction' and 'ttdeleterecordfunction' functions in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers...

CVE-2025-9018

CVE-2025-9018 affects the WordPress Time Tracker plugin up to version 3.1.0. The root cause is a missing capability check in the functions tt_update_table_function and tt_delete_record_function, enabling authenticated users with Subscriber-level access and above to modify options (e.g., user regi...