EUVD-2024-33184

Malicious code in bioql PyPI...

EUVD-2025-24199

Malicious code in bioql PyPI...

EUVD-2024-43382

Malicious code in bioql PyPI...

EUVD-2025-23784

Malicious code in bioql PyPI...

EUVD-2024-50564

Malicious code in bioql PyPI...

EUVD-2024-17173

Malicious code in bioql PyPI...

EUVD-2024-32307

Malicious code in bioql PyPI...

EUVD-2024-27729

Malicious code in bioql PyPI...

EUVD-2024-27205

Malicious code in bioql PyPI...

EUVD-2024-27612

Malicious code in bioql PyPI...

EUVD-2025-27953

Malicious code in bioql PyPI...

EUVD-2024-49999

Malicious code in bioql PyPI...

EUVD-2024-51723

Malicious code in bioql PyPI...

CVE-2025-9077

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated Text' field of the Typeout Widget in version 1.1.9 and below due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-9204 X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field

The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field in all versions up to, and including, 1.0.16. This is due to insufficient input sanitization and output escaping on the Youtube Video ID parameter. This makes it possible fo...

CVE-2025-9077 Ultra Addons Lite for Elementor <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Field

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated Text' field of the Typeout Widget in version 1.1.9 and below due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-9077

The CVE-2025-9077 in Ultra Addons Lite for Elementor (WordPress) is a stored XSS in the Typeout Widget’s Animated Text field (versions

CVE-2025-9077 Ultra Addons Lite for Elementor <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Field

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated Text' field of the Typeout Widget in version 1.1.9 and below due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress plugin Ultra Addons Lite for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-8214 The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget

The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...