EUVD-2022-31704

Malicious code in bioql PyPI...

EUVD-2025-28750

Malicious code in bioql PyPI...

EUVD-2023-43153

Malicious code in bioql PyPI...

EUVD-2022-4538

Malicious code in bioql PyPI...

EUVD-2022-28005

Malicious code in bioql PyPI...

EUVD-2025-17896

Malicious code in bioql PyPI...

EUVD-2023-48100

Malicious code in bioql PyPI...

EUVD-2021-8037

Malicious code in bioql PyPI...

EUVD-2025-18022

Malicious code in bioql PyPI...

EUVD-2025-14356

Malicious code in bioql PyPI...

EUVD-2022-4892

Malicious code in bioql PyPI...

EUVD-2022-3412

Malicious code in bioql PyPI...

CVE-2025-9884

The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious w...

EUVD-2025-32266

The TableGen – Data Table Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2025-32274

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated Text' field of the Typeout Widget in version 1.1.9 and below due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-9884 Mobile Site Redirect <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious w...

PT-2025-40499

Name of the Vulnerable Software and Affected Versions A Simple Multilanguage Plugin versions prior to 1.0 Description The A Simple Multilanguage Plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'asmp-switcher' shortcode. Insufficient input sanitization and output...

PT-2025-40500

Name of the Vulnerable Software and Affected Versions Auto Bulb Finder for WordPress plugin versions prior to 2.8.1 Description The Auto Bulb Finder for WordPress plugin is susceptible to Stored Cross-Site Scripting through the 'abf vehicle' shortcode. Insufficient input sanitization and output...

CVE-2025-9884: Cross-Site Request Forgery (CSRF)

The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious w...

CVE-2025-20357 Cisco CyberVision Center Reports Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-base...