EUVD-2024-16823

Malicious code in bioql PyPI...

EUVD-2024-16819

Malicious code in bioql PyPI...

EUVD-2024-16868

Malicious code in bioql PyPI...

EUVD-2024-16167

Malicious code in bioql PyPI...

EUVD-2024-16246

Malicious code in bioql PyPI...

EUVD-2024-32186

Malicious code in bioql PyPI...

EUVD-2024-27492

Malicious code in bioql PyPI...

EUVD-2023-33919

Malicious code in bioql PyPI...

EUVD-2023-58917

Malicious code in bioql PyPI...

EUVD-2025-28662

Malicious code in bioql PyPI...

EUVD-2025-27129

Malicious code in bioql PyPI...

EUVD-2024-17388

Malicious code in bioql PyPI...

EUVD-2025-12804

Malicious code in bioql PyPI...

EUVD-2024-17585

Malicious code in bioql PyPI...

CVE-2025-10212

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

CVE-2025-9194

CVE-2025-9194 concerns the WordPress plugin Constructor (versions up to 1.6.5). The issue is a missing capability check in the clean() function, enabling authenticated attackers with Subscriber-level access or higher to trigger a theme clean and modify data. Public sources (e.g., PT-2025-40485) n...

PT-2025-40485

Name of the Vulnerable Software and Affected Versions Constructor theme for WordPress versions prior to 1.6.6 Description The Constructor theme for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check within the clean function. Authenticated...

CVE-2025-9194: Missing Authorization

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-10212: Missing Authorization

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

CVE-2020-36852 Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping

The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazalesdsdeleteentriestablerow function. This makes it possible for...