EUVD-2023-34180

Malicious code in bioql PyPI...

EUVD-2024-50713

Malicious code in bioql PyPI...

EUVD-2024-47176

Malicious code in bioql PyPI...

EUVD-2025-22398

Malicious code in bioql PyPI...

EUVD-2024-48512

Malicious code in bioql PyPI...

EUVD-2024-31841

Malicious code in bioql PyPI...

EUVD-2025-4540

Malicious code in bioql PyPI...

EUVD-2024-34216

Malicious code in bioql PyPI...

EUVD-2024-48316

Malicious code in bioql PyPI...

EUVD-2024-51559

Malicious code in bioql PyPI...

EUVD-2023-12741

Malicious code in bioql PyPI...

EUVD-2025-13652

Malicious code in bioql PyPI...

EUVD-2024-53969

Malicious code in bioql PyPI...

EUVD-2022-24768

Malicious code in bioql PyPI...

CVE-2025-9212

The CVE refers to WP Dispatcher for WordPress (plugin) with Arbitrary File Upload via wp_dispatcher_process_upload() in all versions up to 1.2.0. Affected: WordPress plugin WP Dispatcher; attacker must be authenticated at Subscriber level or higher. Impact: upload of arbitrary files that could le...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-10305

CVE-2025-10305 documents a vulnerability in the WordPress Secure Passkeys plugin (versions up to and including 1.2.1) where delete_passkey() and passkeys_list() lack proper authorization checks. This allows authenticated users with Subscriber+ privileges to view and delete passkeys. The issue has...

CVE-2025-9215

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the filedownload function. This makes it possible for authenticated attackers, with...

CVE-2025-8487

CVE-2025-8487 affects Kubio AI Page Builder for WordPress up to version 2.6.3. The vulnerability is caused by a missing capability check on the kubio-image-hub-install-plugin AJAX action, enabling authenticated users with Subscriber-level access and above to install the Image Hub plugin. Exploita...

CVE-2025-8999 Sydney <= 2.56 - Missing Authorization to Authenticated (Subscriber+) Limited Theme Options Update

The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activatemodules' function in all versions up to, and including, 2.56. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate...