EUVD-2023-44130

Malicious code in bioql PyPI...

EUVD-2025-3264

Malicious code in bioql PyPI...

EUVD-2023-36850

Malicious code in bioql PyPI...

EUVD-2023-37721

Malicious code in bioql PyPI...

EUVD-2022-4114

Malicious code in bioql PyPI...

EUVD-2025-21892

Malicious code in bioql PyPI...

EUVD-2023-38698

Malicious code in bioql PyPI...

EUVD-2024-36059

Malicious code in bioql PyPI...

EUVD-2024-52126

Malicious code in bioql PyPI...

EUVD-2024-50910

Malicious code in bioql PyPI...

EUVD-2024-3091

Malicious code in bioql PyPI...

EUVD-2025-7077

Malicious code in bioql PyPI...

EUVD-2023-44238

Malicious code in bioql PyPI...

EUVD-2022-48125

Malicious code in bioql PyPI...

EUVD-2023-27957

Malicious code in bioql PyPI...

EUVD-2024-34789

Malicious code in bioql PyPI...

EUVD-2023-2433

Malicious code in bioql PyPI...

PT-2025-40480

Name of the Vulnerable Software and Affected Versions Easy Elementor Addons versions prior to 2.2.8 Description The Easy Elementor Addons plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping in several widget...

CVE-2025-40989

CVE-2025-40989 describes a stored cross-site scripting vulnerability in Ekushey CRM v5.0 (Creativeitem) caused by insufficient validation of user input in the POST endpoint dealing with the applicant’s message, specifically the API path that includes the message parameter. The affected component ...

CVE-2025-6941

CVE-2025-6941 is a stored XSS in the WordPress plugin LatePoint (Calendar Booking Plugin for Appointments and Events). The issue arises from insufficient input sanitization/escaping in the id parameter of the latepoint_resources shortcode, affecting all versions up to and including 5.1.94. Exploi...