EUVD-2022-15697

Malicious code in bioql PyPI...

EUVD-2024-47358

Malicious code in bioql PyPI...

EUVD-2025-8002

Malicious code in bioql PyPI...

EUVD-2023-25629

Malicious code in bioql PyPI...

EUVD-2025-8655

Malicious code in bioql PyPI...

EUVD-2022-43242

Malicious code in bioql PyPI...

EUVD-2024-16445

Malicious code in bioql PyPI...

EUVD-2022-42456

Malicious code in bioql PyPI...

EUVD-2021-27588

Malicious code in bioql PyPI...

EUVD-2024-54535

Malicious code in bioql PyPI...

EUVD-2022-33755

Malicious code in bioql PyPI...

EUVD-2022-28157

Malicious code in bioql PyPI...

EUVD-2023-54285

Malicious code in bioql PyPI...

EUVD-2022-51585

Malicious code in bioql PyPI...

CVE-2025-9332

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

PT-2025-34879 · Unknown · Diskover-Web

Name of the Vulnerable Software and Affected Versions: diskover-web version 2.3.0 Description: The application does not properly sanitize user-supplied input in several configuration fields within the administrative settings interface, leading to stored cross-site scripting XSS. Specifically, the...

WordPress Quiz And Survey Master Plugin < 10.2.3 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:expresstech:quizandsurveymaster"; if description...

CVE-2025-54717 WordPress WP Membership Plugin <= 1.6.3 - Settings Change Vulnerability

Missing Authorization vulnerability in e-plugins WP Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Membership: from n/a through 1.6.3...

CVE-2025-6790 QSM < 10.2.3 - Template Creation via CSRF

The Quiz and Survey Master QSM WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress plugin Newsletter security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...