EUVD-2024-54177

Malicious code in bioql PyPI...

EUVD-2025-18447

Malicious code in bioql PyPI...

EUVD-2024-33749

Malicious code in bioql PyPI...

EUVD-2023-57749

Malicious code in bioql PyPI...

EUVD-2025-10109

Malicious code in bioql PyPI...

EUVD-2025-19917

Malicious code in bioql PyPI...

EUVD-2022-4673

Malicious code in bioql PyPI...

EUVD-2024-50545

Malicious code in bioql PyPI...

EUVD-2024-16970

Malicious code in bioql PyPI...

EUVD-2022-3903

Malicious code in bioql PyPI...

EUVD-2022-29557

Malicious code in bioql PyPI...

CVE-2025-6986

CVE-2025-6986 affects the WordPress plugin FileBird – WordPress Media Library Folders & File Manager (versions prior to 6.4.9). The vulnerability is an authenticated SQL Injection via the search parameter caused by insufficient escaping and poor SQL query preparation, allowing an attacker with Au...

CVE-2025-7036

CVE-2025-7036 affects the CleverReach WordPress plugin (CleverReachWP) for WordPress, with unauthenticated, time-based SQL injection via the title parameter in all versions up to 1.5.20. Root cause: insufficient escaping of user input and insufficient preparation of the existing SQL query. Impact...

PT-2025-32034 · WordPress · Filebird – Wordpress Media Library Folders & File Manager

Name of the Vulnerable Software and Affected Versions: FileBird – WordPress Media Library Folders & File Manager versions prior to 6.4.9 Description: The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress contains a SQL Injection issue due to insufficient escaping of t...

CVE-2025-6717

The B1.lt plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 2.2.56 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...

CVE-2021-4458

The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2021-4458 Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection

The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2025-6739

The WPQuiz plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'wpquiz' shortcode in all versions up to, and including, 0.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2025-6783

CVE-2025-6783 (GoZen Forms, WordPress) is an unauthenticated SQL injection in the GoZen Forms plugin for WordPress (versions

PT-2025-27852 · WordPress · Gozen Forms

Name of the Vulnerable Software and Affected Versions: GoZen Forms plugin for WordPress versions up to, and including, 1.1.5 Description: The issue allows unauthenticated attackers to perform SQL Injection via the forms-id parameter of the emdedSc function due to insufficient escaping on the...