EUVD-2023-23578

Malicious code in bioql PyPI...

EUVD-2022-53221

Malicious code in bioql PyPI...

EUVD-2022-53349

Malicious code in bioql PyPI...

EUVD-2022-53220

Malicious code in bioql PyPI...

EUVD-2021-29213

Malicious code in bioql PyPI...

EUVD-2023-23577

Malicious code in bioql PyPI...

EUVD-2023-23575

Malicious code in bioql PyPI...

EUVD-2023-23574

Malicious code in bioql PyPI...

EUVD-2025-16674

Malicious code in bioql PyPI...

EUVD-2025-13461

Malicious code in bioql PyPI...

EUVD-2023-30932

Malicious code in bioql PyPI...

EUVD-2022-51627

Malicious code in bioql PyPI...

EUVD-2025-8154

Malicious code in bioql PyPI...

EUVD-2023-34515

Malicious code in bioql PyPI...

EUVD-2025-30307

Malicious code in bioql PyPI...

EUVD-2022-53222

Malicious code in bioql PyPI...

CVE-2025-9882

The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...

CVE-2025-9882

The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...

CVE-2025-9882 osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...

CVE-2025-9882 osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...