EUVD-2025-32492

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

CVE-2025-10192

The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppeeffect' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2025-9892

The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the update function. This makes it possible for unauthenticated attackers to update the plugin's...

CVE-2025-9858

The Auto Bulb Finder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abfvehicle' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2025-9243 Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the getccorders and updateorderstatus functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with...

WordPress plugin WP Photo Album Plus 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

WordPress WP Dispatcher plugin <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Craig Webb in WordPress Plugin WP Dispatcher versions = 1.2.0...

WordPress RestroPress plugin 3.0.0-3.2.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by kr0d in WordPress Plugin RestroPress versions 3.0.0-3.2.1...

EUVD-2022-24806

Malicious code in bioql PyPI...

EUVD-2022-24959

Malicious code in bioql PyPI...

EUVD-2023-33904

Malicious code in bioql PyPI...

EUVD-2024-51692

Malicious code in bioql PyPI...

EUVD-2024-16844

Malicious code in bioql PyPI...

EUVD-2024-50635

Malicious code in bioql PyPI...

EUVD-2024-49212

Malicious code in bioql PyPI...

EUVD-2024-47762

Malicious code in bioql PyPI...

EUVD-2025-22499

Malicious code in bioql PyPI...

EUVD-2025-22494

Malicious code in bioql PyPI...

EUVD-2025-16851

Malicious code in bioql PyPI...

EUVD-2022-52740

Malicious code in bioql PyPI...