EUVD-2022-39403

Malicious code in bioql PyPI...

EUVD-2022-39401

Malicious code in bioql PyPI...

EUVD-2022-39400

Malicious code in bioql PyPI...

EUVD-2022-44632

Malicious code in bioql PyPI...

EUVD-2022-39411

Malicious code in bioql PyPI...

EUVD-2022-39405

Malicious code in bioql PyPI...

EUVD-2023-42868

Malicious code in bioql PyPI...

EUVD-2022-39407

Malicious code in bioql PyPI...

EUVD-2022-34014

Malicious code in bioql PyPI...

EUVD-2022-49730

Malicious code in bioql PyPI...

CVE-2025-10726

The WPRecovery plugin for WordPress is vulnerable to SQL Injection via the 'dataid' parameter in all versions up to, and including, 2.0. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-10582

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

CVE-2025-10582 WP Dispatcher <= 1.2.0 - Authenticated (Contributor+) SQL Injection

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

CVE-2025-10582

CVE-2025-10582 affects the WP Dispatcher WordPress plugin. It is an SQL Injection via the id parameter in all versions up to 1.2.0 due to insufficient escaping and lack of proper query preparation. Authenticated attackers with Contributor-level access and above can append additional SQL queries t...

CVE-2025-10582 WP Dispatcher <= 1.2.0 - Authenticated (Contributor+) SQL Injection

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

CVE-2025-10726

CVE-2025-10726 (WPRecovery) affects WordPress WPRecovery plugin up to version 2.0. It describes an unauthenticated SQL Injection via data[id] that can cause leakage of sensitive data and, via the query result being passed to unlink(), arbitrary file deletion on the server. The Wordfence report co...

PT-2025-40475

Name of the Vulnerable Software and Affected Versions WPRecovery versions prior to 2.1 Description The WPRecovery plugin for WordPress is affected by a SQL Injection issue due to insufficient input validation and preparation of SQL queries. Specifically, the dataid parameter is vulnerable. This...

PT-2025-40474

Name of the Vulnerable Software and Affected Versions WP Dispatcher plugin for WordPress versions up to and including 1.2.0 Description The WP Dispatcher plugin for WordPress is susceptible to SQL Injection via the id parameter. Insufficient escaping of user-supplied input and a lack of proper SQ...

CVE-2025-6941

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'latepointresources' shortcode in all versions up to, and including, 5.1.94 due to insufficient input sanitization and output escapin...

CVE-2025-6941

CVE-2025-6941 is a stored XSS in the WordPress plugin LatePoint (Calendar Booking Plugin for Appointments and Events). The issue arises from insufficient input sanitization/escaping in the id parameter of the latepoint_resources shortcode, affecting all versions up to and including 5.1.94. Exploi...