EUVD-2025-7863

Malicious code in bioql PyPI...

CVE-2025-28908

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pipdig pipDisqus pipdisqus allows Stored XSS.This issue affects pipDisqus: from n/a through = 1.6...

CVE-2025-28908

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pipdig pipDisqus pipdisqus allows Stored XSS.This issue affects pipDisqus: from n/a through = 1.6...

CVE-2025-28908

CVE-2025-28908 affects the WordPress plugin pipDisqus (versions up to 1.6). The issue is a stored XSS caused by improper neutralization of input during web page generation, allowing injected scripts to persist in stored content. The available connected documents identify the vulnerability class a...

WordPress Pipdig Power Pack plugin <= 4.7.3 - Vendor Backdoors & Suspicious Code

Vendor Backdoors & Suspicious Code found in WordPress Pipdig Power Pack plugin versions = 4.7.3. Solution Update the WordPress Pipdig Power Pack plugin to the latest available version at least 4.8.0...