EUVD-2022-2616

Malicious code in bioql PyPI...

EUVD-2024-47679

Malicious code in bioql PyPI...

EUVD-2022-5335

Malicious code in bioql PyPI...

EUVD-2025-28862

Malicious code in bioql PyPI...

EUVD-2023-27974

Malicious code in bioql PyPI...

EUVD-2024-36705

Malicious code in bioql PyPI...

EUVD-2024-31764

Malicious code in bioql PyPI...

EUVD-2022-5060

Malicious code in bioql PyPI...

EUVD-2023-12767

Malicious code in bioql PyPI...

EUVD-2022-4145

Malicious code in bioql PyPI...

EUVD-2022-4969

Malicious code in bioql PyPI...

EUVD-2022-2986

Malicious code in bioql PyPI...

EUVD-2022-4773

Malicious code in bioql PyPI...

Malicious code in offer-ocean-dead (npm)

The package offer-ocean-dead was found to contain malicious code...

MAL-2025-45420 Malicious code in offer-ocean-dead (npm)

The package offer-ocean-dead was found to contain malicious code...

WordPress Ocean Extra plugin cross-site scripting vulnerability

WordPress Ocean Extra plugin is a free plugin for the WordPress platform, designed for the OceanWP theme, aiming to enhance the website building experience by adding extra functionality and flexibility. A cross-site scripting vulnerability exists in the WordPress Ocean Extra plugin, which stems...

CVE-2025-9499

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9499

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9499 Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-9499 Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...