EUVD-2024-48289

Malicious code in bioql PyPI...

EUVD-2024-17497

Malicious code in bioql PyPI...

EUVD-2022-42721

Malicious code in bioql PyPI...

EUVD-2025-19712

Malicious code in bioql PyPI...

EUVD-2023-26961

Malicious code in bioql PyPI...

EUVD-2025-21210

Malicious code in bioql PyPI...

EUVD-2024-44005

Malicious code in bioql PyPI...

EUVD-2024-44330

Malicious code in bioql PyPI...

EUVD-2025-13649

Malicious code in bioql PyPI...

CVE-2025-7825

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...

WordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Aiden in WordPress Plugin WooCommerce Vehicle Parts Finder versions = 3.7...

WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by theviper17 in WordPress Plugin Icegram Express Pro versions 5.9.14...

WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme DentiCare versions 1.4.3...

WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Goldenblatt versions 1.3.0...

WordPress DentiCare Theme < 1.4.3 is vulnerable to PHP Object Injection

Software DentiCare Type Theme Vulnerable versions 1.4.3 Fixed in 1.4.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-54723 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID c2cef3d0d976 Credits Bonds Required privilege Unauthenticated Publishe...

WordPress GSheets Connector Plugin <= 1.1.1 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Drew / mcdruid in WordPress Plugin GSheets Connector versions = 1.1.1...

WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin ConveyThis versions = 269.1...

CVE-2025-53465 WordPress GSheets Connector Plugin <= 1.1.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector sheetlink allows Object Injection.This issue affects GSheets Connector: from n/a through = 1.1.1...

CVE-2025-53465

CVE-2025-53465 describes a deserialization of untrusted data vulnerability in the raoinfotech GSheets Connector. This allows Object Injection and affects the GSheets Connector versions from n/a through 1.1.1. The CVSS 3.1 base score is 7.2 (High) with network attack vector, low attack complexity,...

CVE-2025-9083

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog...