448 matches found
EUVD-2024-47191
Malicious code in bioql PyPI...
EUVD-2025-12468
Malicious code in bioql PyPI...
EUVD-2025-4444
Malicious code in bioql PyPI...
EUVD-2024-51622
Malicious code in bioql PyPI...
EUVD-2022-4673
Malicious code in bioql PyPI...
EUVD-2022-3903
Malicious code in bioql PyPI...
EUVD-2024-51683
Malicious code in bioql PyPI...
EUVD-2024-16970
Malicious code in bioql PyPI...
EUVD-2023-12335
Malicious code in bioql PyPI...
EUVD-2023-57653
Malicious code in bioql PyPI...
EUVD-2025-18447
Malicious code in bioql PyPI...
EUVD-2025-19917
Malicious code in bioql PyPI...
CVE-2025-6986
CVE-2025-6986 affects the WordPress plugin FileBird – WordPress Media Library Folders & File Manager (versions prior to 6.4.9). The vulnerability is an authenticated SQL Injection via the search parameter caused by insufficient escaping and poor SQL query preparation, allowing an attacker with Au...
CVE-2025-7036
CVE-2025-7036 affects the CleverReach WordPress plugin (CleverReachWP) for WordPress, with unauthenticated, time-based SQL injection via the title parameter in all versions up to 1.5.20. Root cause: insufficient escaping of user input and insufficient preparation of the existing SQL query. Impact...
PT-2025-32034 · WordPress · Filebird – Wordpress Media Library Folders & File Manager
Name of the Vulnerable Software and Affected Versions: FileBird – WordPress Media Library Folders & File Manager versions prior to 6.4.9 Description: The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress contains a SQL Injection issue due to insufficient escaping of t...
CVE-2025-6717
The B1.lt plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 2.2.56 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...
CVE-2021-4458
The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2021-4458 Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection
The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2025-6739
The WPQuiz plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'wpquiz' shortcode in all versions up to, and including, 0.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...