EUVD-2025-20374

Malicious code in bioql PyPI...

EUVD-2024-48258

Malicious code in bioql PyPI...

EUVD-2024-34300

Malicious code in bioql PyPI...

EUVD-2024-51571

Malicious code in bioql PyPI...

EUVD-2024-46464

Malicious code in bioql PyPI...

EUVD-2024-44088

Malicious code in bioql PyPI...

EUVD-2025-17372

Malicious code in bioql PyPI...

EUVD-2025-4735

Malicious code in bioql PyPI...

EUVD-2025-1681

Malicious code in bioql PyPI...

EUVD-2025-21591

Malicious code in bioql PyPI...

EUVD-2023-59231

Malicious code in bioql PyPI...

EUVD-2025-16720

Malicious code in bioql PyPI...

EUVD-2025-12123

Malicious code in bioql PyPI...

EUVD-2024-47074

Malicious code in bioql PyPI...

CVE-2025-10130

The Layers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'webcam' shortcode in all versions up to, and including, 0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, wi...

CVE-2025-8897

CVE-2025-8897 documents a Reflected Cross-Site Scripting vulnerability in Beaver Builder – WordPress Page Builder (Lite) versions up to 2.9.2.1. The issue arises from insufficient input sanitization and output escaping in the fl_builder parameter, enabling an unauthenticated attacker to inject sc...

CVE-2025-8064 Bible SuperSearch <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via selector_height Parameter

The Bible SuperSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘selectorheight’ parameter in all versions up to, and including, 6.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2025-32634 · WordPress +1 · The Master Addons – Elementor Addons +1

Name of the Vulnerable Software and Affected Versions: Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress versions up to and including 2.0.8.6 Description: The plugin is susceptible to Stored Cross-Site Scripting due to...

CVE-2025-6256

The Flex Guten plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘thumbnailHoverEffect’ parameter in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-7399

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all versions up to, and including, 28.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...