EUVD-2025-28788

Malicious code in bioql PyPI...

CVE-2025-8102

The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0. This is due to missing nonce validations in the eddsendwpdisconnect and eddsendwpremoteinstall functions. This makes it possible for unauthenticated attackers t...

PT-2024-13046

Name of the Vulnerable Software and Affected Versions GiveWP plugin for WordPress versions up to, and including, 2.33.3 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the give sendwp disconnect function. This allows unauthenticated...