EUVD-2025-14795

Malicious code in bioql PyPI...

EUVD-2023-59350

Malicious code in bioql PyPI...

EUVD-2024-16919

Malicious code in bioql PyPI...

EUVD-2022-0982

Malicious code in bioql PyPI...

EUVD-2024-16918

Malicious code in bioql PyPI...

EUVD-2021-28578

Malicious code in bioql PyPI...

EUVD-2023-34143

Malicious code in bioql PyPI...

EUVD-2024-32689

Malicious code in bioql PyPI...

EUVD-2023-32109

Malicious code in bioql PyPI...

EUVD-2025-31221

Malicious code in bioql PyPI...

CVE-2025-10137

The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...

CVE-2025-10137

The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...

CVE-2025-10137 Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery

The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...

CVE-2025-10137

CVE-2025-10137 (Snow Monkey theme for WordPress) is an SSRF vulnerability in the Snow Monkey theme. Public details in connected docs indicate an unauthenticated, blind SSRF via the request() function affecting Snow Monkey versions up to 29.1.5. Wordfence references show the patch/mitigation path,...

CVE-2025-10137 Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery

The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...

CVE-2025-10137 Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery

The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...

WordPress plugin Snow Monkey 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

PT-2025-39515

Name of the Vulnerable Software and Affected Versions Snow Monkey versions prior to 29.1.6 Description The Snow Monkey theme for WordPress is susceptible to Server-Side Request Forgery SSRF in all versions up to and including 29.1.5. This flaw resides within the request function and allows...

WordPress Snow Monkey plugin <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery vulnerability

Unauthenticated Blind Server-Side Request Forgery vulnerability discovered by elmore in WordPress Theme Snow Monkey versions 29.1.5...

WordPress Snow Monkey Theme 29.1.5 is vulnerable to Server Side Request Forgery (SSRF)

Software Snow Monkey Type Theme Vulnerable versions 29.1.5 Fixed in 29.1.6 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2025-10137 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 607b6876f535 Credits elmore Required privilege...