EUVD-2024-47176

Malicious code in bioql PyPI...

EUVD-2025-22398

Malicious code in bioql PyPI...

EUVD-2024-48512

Malicious code in bioql PyPI...

EUVD-2024-16903

Malicious code in bioql PyPI...

EUVD-2024-31841

Malicious code in bioql PyPI...

EUVD-2025-4540

Malicious code in bioql PyPI...

EUVD-2024-34216

Malicious code in bioql PyPI...

EUVD-2024-48316

Malicious code in bioql PyPI...

EUVD-2024-53969

Malicious code in bioql PyPI...

EUVD-2022-24768

Malicious code in bioql PyPI...

EUVD-2025-27569

Malicious code in bioql PyPI...

EUVD-2024-54449

Malicious code in bioql PyPI...

EUVD-2024-54113

Malicious code in bioql PyPI...

EUVD-2024-50999

Malicious code in bioql PyPI...

EUVD-2024-50786

Malicious code in bioql PyPI...

EUVD-2024-34362

Malicious code in bioql PyPI...

CVE-2025-9212

The CVE refers to WP Dispatcher for WordPress (plugin) with Arbitrary File Upload via wp_dispatcher_process_upload() in all versions up to 1.2.0. Affected: WordPress plugin WP Dispatcher; attacker must be authenticated at Subscriber level or higher. Impact: upload of arbitrary files that could le...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-10305

CVE-2025-10305 documents a vulnerability in the WordPress Secure Passkeys plugin (versions up to and including 1.2.1) where delete_passkey() and passkeys_list() lack proper authorization checks. This allows authenticated users with Subscriber+ privileges to view and delete passkeys. The issue has...

CVE-2025-9215

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the filedownload function. This makes it possible for authenticated attackers, with...