EUVD-2024-46294

Malicious code in bioql PyPI...

EUVD-2022-24627

Malicious code in bioql PyPI...

EUVD-2024-50680

Malicious code in bioql PyPI...

EUVD-2025-7381

Malicious code in bioql PyPI...

EUVD-2024-32825

Malicious code in bioql PyPI...

EUVD-2023-23628

Malicious code in bioql PyPI...

EUVD-2024-34268

Malicious code in bioql PyPI...

EUVD-2025-10320

Malicious code in bioql PyPI...

EUVD-2023-24041

Malicious code in bioql PyPI...

EUVD-2025-5481

Malicious code in bioql PyPI...

EUVD-2024-49213

Malicious code in bioql PyPI...

EUVD-2024-32608

Malicious code in bioql PyPI...

EUVD-2025-7188

Malicious code in bioql PyPI...

EUVD-2025-18449

Malicious code in bioql PyPI...

EUVD-2025-14999

Malicious code in bioql PyPI...

EUVD-2025-9122

Malicious code in bioql PyPI...

EUVD-2024-33039

Malicious code in bioql PyPI...

PT-2025-31488 · WordPress · Givewp – Donation Plugin/Fundraising Platform

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions prior to 4.5.1 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is susceptible to Stored Cross-Site Scripting through the donor notes parameter...

CVE-2025-6747

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusionmap' shortcode in all versions up to, and including, 3.12.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-5568 WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...