EUVD-2024-35937

Malicious code in bioql PyPI...

EUVD-2024-53029

Malicious code in bioql PyPI...

EUVD-2024-31781

Malicious code in bioql PyPI...

EUVD-2024-20084

Malicious code in bioql PyPI...

EUVD-2023-36370

Malicious code in bioql PyPI...

EUVD-2022-7039

Malicious code in bioql PyPI...

EUVD-2024-47554

Malicious code in bioql PyPI...

EUVD-2022-3360

Malicious code in bioql PyPI...

EUVD-2025-11635

Malicious code in bioql PyPI...

EUVD-2022-50697

Malicious code in bioql PyPI...

EUVD-2024-46208

Malicious code in bioql PyPI...

EUVD-2024-47051

Malicious code in bioql PyPI...

EUVD-2024-40083

Malicious code in bioql PyPI...

EUVD-2024-53739

Malicious code in bioql PyPI...

EUVD-2025-3406

Malicious code in bioql PyPI...

EUVD-2022-48587

Malicious code in bioql PyPI...

EUVD-2022-4581

Malicious code in bioql PyPI...

PT-2025-40480

Name of the Vulnerable Software and Affected Versions Easy Elementor Addons versions prior to 2.2.8 Description The Easy Elementor Addons plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping in several widget...

CVE-2025-40989

CVE-2025-40989 describes a stored cross-site scripting vulnerability in Ekushey CRM v5.0 (Creativeitem) caused by insufficient validation of user input in the POST endpoint dealing with the applicant’s message, specifically the API path that includes the message parameter. The affected component ...

CVE-2025-6941

CVE-2025-6941 is a stored XSS in the WordPress plugin LatePoint (Calendar Booking Plugin for Appointments and Events). The issue arises from insufficient input sanitization/escaping in the id parameter of the latepoint_resources shortcode, affecting all versions up to and including 5.1.94. Exploi...