EUVD-2020-1470

Malware in sbrugna...

EUVD-2006-1017

Malware in sbrugna...

EUVD-2025-29676

Malicious code in bioql PyPI...

EUVD-2023-27962

Malicious code in bioql PyPI...

EUVD-2025-28792

Malicious code in bioql PyPI...

EUVD-2025-31692

Malicious code in bioql PyPI...

EUVD-2022-2041

Malicious code in bioql PyPI...

EUVD-2021-2168

Malicious code in bioql PyPI...

EUVD-2025-10019

Malicious code in bioql PyPI...

EUVD-2024-17139

Malicious code in bioql PyPI...

EUVD-2025-31682

Malicious code in bioql PyPI...

EUVD-2024-49489

Malicious code in bioql PyPI...

EUVD-2022-1973

Malicious code in bioql PyPI...

EUVD-2023-3012

Malicious code in bioql PyPI...

EUVD-2022-34697

Malicious code in bioql PyPI...

PT-2025-40476

Name of the Vulnerable Software and Affected Versions JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress versions prior to 5.7.4 Description The JoomSport plugin for WordPress is susceptible to a Local File Inclusion issue through the task parameter. This allows...

CVE-2025-9991

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

CVE-2025-9991

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

CVE-2025-10380

The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template Injection in all versions up to, and including, 3.7.19. This is due to insufficient input sanitization and lack of access control when processing custom Twig templates in the Mod...

CVE-2025-10143

The Catch Dark Mode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0 via the 'catchdarkmode' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on t...