EUVD-2022-4843

Malicious code in bioql PyPI...

EUVD-2023-34178

Malicious code in bioql PyPI...

EUVD-2022-52194

Malicious code in bioql PyPI...

EUVD-2025-20754

Malicious code in bioql PyPI...

EUVD-2024-16868

Malicious code in bioql PyPI...

EUVD-2024-17461

Malicious code in bioql PyPI...

EUVD-2024-54064

Malicious code in bioql PyPI...

EUVD-2023-58722

Malicious code in bioql PyPI...

EUVD-2021-34162

Malicious code in bioql PyPI...

EUVD-2024-47786

Malicious code in bioql PyPI...

EUVD-2024-17145

Malicious code in bioql PyPI...

EUVD-2024-39191

Malicious code in bioql PyPI...

EUVD-2024-33752

Malicious code in bioql PyPI...

EUVD-2024-46821

Malicious code in bioql PyPI...

EUVD-2024-54069

Malicious code in bioql PyPI...

EUVD-2024-54170

Malicious code in bioql PyPI...

CVE-2025-9194

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9194

CVE-2025-9194 concerns the WordPress plugin Constructor (versions up to 1.6.5). The issue is a missing capability check in the clean() function, enabling authenticated attackers with Subscriber-level access or higher to trigger a theme clean and modify data. Public sources (e.g., PT-2025-40485) n...

PT-2025-40485

Name of the Vulnerable Software and Affected Versions Constructor theme for WordPress versions prior to 1.6.6 Description The Constructor theme for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check within the clean function. Authenticated...