EUVD-2024-16896

Malicious code in bioql PyPI...

EUVD-2023-52118

Malicious code in bioql PyPI...

EUVD-2022-48088

Malicious code in bioql PyPI...

EUVD-2024-35333

Malicious code in bioql PyPI...

EUVD-2024-37659

Malicious code in bioql PyPI...

EUVD-2024-16553

Malicious code in bioql PyPI...

EUVD-2024-16895

Malicious code in bioql PyPI...

EUVD-2024-17097

Malicious code in bioql PyPI...

EUVD-2023-52746

Malicious code in bioql PyPI...

EUVD-2022-1298

Malicious code in bioql PyPI...

EUVD-2024-51068

Malicious code in bioql PyPI...

EUVD-2024-33331

Malicious code in bioql PyPI...

EUVD-2024-33777

Malicious code in bioql PyPI...

EUVD-2025-6876

Malicious code in bioql PyPI...

CVE-2025-9979

The Maspik plugin for WordPress is vulnerable to Missing Authorization in version 2.5.6 and prior. This is due to missing capability checks on the Maspikspamlogdownloadcsv function. This makes it possible for authenticated attackers, with subscriber-level access and above, to export and download...

Linux Distros Unpatched Vulnerability : CVE-2021-36401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk. CVE-2021-36401 Note that Nessus relies on...

CVE-2025-54766

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to export the appliance configuration, exposing sensitive information...

CVE-2025-6814

The Booking X plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportnow function in versions 1.0 to 1.1.2. This makes it possible for unauthenticated attackers to download all plugin data, including user accounts, user meta, and PayPal...

PT-2025-27855 · WordPress · Booking X

Name of the Vulnerable Software and Affected Versions: Booking X plugin for WordPress versions 1.0 through 1.1.2 Description: The issue allows unauthorized access to data due to a missing capability check on the export now function. This enables unauthenticated attackers to download all plugin...

CVE-2024-1119

The Order Tip for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exporttipstocsv function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to export the plugin's order fees...