EUVD-2024-17388

Malicious code in bioql PyPI...

EUVD-2023-33919

Malicious code in bioql PyPI...

EUVD-2025-5888

Malicious code in bioql PyPI...

EUVD-2024-16000

Malicious code in bioql PyPI...

EUVD-2025-12546

Malicious code in bioql PyPI...

EUVD-2024-17585

Malicious code in bioql PyPI...

EUVD-2025-25268

Malicious code in bioql PyPI...

EUVD-2024-31808

Malicious code in bioql PyPI...

EUVD-2024-16847

Malicious code in bioql PyPI...

EUVD-2023-54490

Malicious code in bioql PyPI...

EUVD-2021-34189

Malicious code in bioql PyPI...

EUVD-2024-49169

Malicious code in bioql PyPI...

EUVD-2023-33767

Malicious code in bioql PyPI...

EUVD-2025-6442

Malicious code in bioql PyPI...

CVE-2025-10212

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

CVE-2025-9194

CVE-2025-9194 concerns the WordPress plugin Constructor (versions up to 1.6.5). The issue is a missing capability check in the clean() function, enabling authenticated attackers with Subscriber-level access or higher to trigger a theme clean and modify data. Public sources (e.g., PT-2025-40485) n...

PT-2025-40485

Name of the Vulnerable Software and Affected Versions Constructor theme for WordPress versions prior to 1.6.6 Description The Constructor theme for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check within the clean function. Authenticated...

CVE-2020-36852 Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping

The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazalesdsdeleteentriestablerow function. This makes it possible for...

CVE-2025-11163

The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...

CVE-2025-11163 SmartCrawl SEO checker, analyzer & optimizer <= 3.14.3 - Missing Authorization to Plugin Settings Update

The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...