EUVD-2021-29508

Malicious code in bioql PyPI...

EUVD-2022-40688

Malicious code in bioql PyPI...

EUVD-2022-43499

Malicious code in bioql PyPI...

EUVD-2023-27948

Malicious code in bioql PyPI...

EUVD-2021-34195

Malicious code in bioql PyPI...

EUVD-2024-43956

Malicious code in bioql PyPI...

EUVD-2023-24107

Malicious code in bioql PyPI...

EUVD-2022-49579

Malicious code in bioql PyPI...

EUVD-2022-38130

Malicious code in bioql PyPI...

EUVD-2022-25060

Malicious code in bioql PyPI...

EUVD-2025-15225

Malicious code in bioql PyPI...

EUVD-2022-39493

Malicious code in bioql PyPI...

EUVD-2025-15213

Malicious code in bioql PyPI...

EUVD-2022-35653

Malicious code in bioql PyPI...

EUVD-2022-30262

Malicious code in bioql PyPI...

Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

This module allows you to use different currencies on your website and do currency conversion. The module doesn't sufficiently protect routes used to enable and disable currencies from Cross-Site Request Forgery CSRF attacks, potentially allowing an attacker to trick an admin into changing settin...

CVE-2025-7040 Cloud SAML SSO <= 1.0.19 - Missing Authorization to Unauthenticated Settings Modification via set_organization_settings Action

The Cloud SAML SSO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'setorganizationsettings' action of the cssohandleactions function in all versions up to, and including, 1.0.19. The handler reads client-supplied POST parameters fo...

CVE-2025-58272

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed...

CVE-2025-58272

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed...

CVE-2025-48318 WordPress 多说社会化评论框 plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in shen2 多说社会化评论框 duoshuo allows Cross Site Request Forgery.This issue affects 多说社会化评论框: from n/a through = 1.2...