PT-2026-4041

Name of the Vulnerable Software and Affected Versions Marco van Wieren WPO365 versions n/a through 40.0 Description A Server-Side Request Forgery SSRF vulnerability exists in the wpo365-login component of Marco van Wieren WPO365. This flaw allows for Server Side Request Forgery. Recommendations...

EUVD-2025-204789

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through 1.0.9...

EUVD-2025-30742

Malicious code in bioql PyPI...

EUVD-2025-9137

Malicious code in bioql PyPI...

EUVD-2025-30582

Malicious code in bioql PyPI...

EUVD-2025-24691

Malicious code in bioql PyPI...

EUVD-2025-25293

Malicious code in bioql PyPI...

EUVD-2025-24742

Malicious code in bioql PyPI...

EUVD-2025-27435

Malicious code in bioql PyPI...

EUVD-2025-28207

Malicious code in bioql PyPI...

EUVD-2025-25364

Malicious code in bioql PyPI...

EUVD-2025-6480

Malicious code in bioql PyPI...

PT-2025-38847

Name of the Vulnerable Software and Affected Versions Trustpilot Trustpilot Reviews versions through 2.5.925 Description A missing authorization issue exists in Trustpilot Trustpilot Reviews, stemming from incorrectly configured access control security levels. This allows for unauthorized access...

CVE-2025-58982

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixeline Pixeline's Email Protector pixelines-email-protector allows Stored XSS.This issue affects Pixeline's Email Protector: from n/a through = 1.3.8...

CVE-2025-58216

CVE-2025-58216 is a Stored XSS in the WordPress plugin “WP Thumbtack Review Slider” up to version 2.6, caused by improper input neutralization during web page generation. The vulnerability affects WP Thumbtack Review Slider versions

CVE-2025-54014

Deserialization of Untrusted Data vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Object Injection.This issue affects MediCenter - Health Medical Clinic: from n/a through = 15.1...

CVE-2025-54735

Incorrect Privilege Assignment vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Privilege Escalation.This issue affects CubeWP: from n/a through = 1.1.24...

CVE-2025-49432

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Video Player: from n/a through = 10.1...

CVE-2025-55708

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through = 10.2.4...

CVE-2025-24775

Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. Forms forms-by-made-it allows Upload a Web Shell to a Web Server.This issue affects Forms: from n/a through = 2.9.0...