EUVD-2024-47307

Malicious code in bioql PyPI...

EUVD-2024-46675

Malicious code in bioql PyPI...

EUVD-2024-50444

Malicious code in bioql PyPI...

EUVD-2025-22401

Malicious code in bioql PyPI...

EUVD-2025-27525

Malicious code in bioql PyPI...

EUVD-2025-30311

Malicious code in bioql PyPI...

EUVD-2024-32106

Malicious code in bioql PyPI...

EUVD-2024-50997

Malicious code in bioql PyPI...

EUVD-2024-50538

Malicious code in bioql PyPI...

EUVD-2024-47113

Malicious code in bioql PyPI...

EUVD-2024-50675

Malicious code in bioql PyPI...

EUVD-2023-58822

Malicious code in bioql PyPI...

EUVD-2024-51708

Malicious code in bioql PyPI...

EUVD-2025-27670

Malicious code in bioql PyPI...

EUVD-2025-29689

Malicious code in bioql PyPI...

CVE-2025-9561

The AP Background plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization and insufficient file validation within the advParallaxBackAdminSaveSlider handler in versions 3.8.1 to 3.8.2. This makes it possible for authenticated attackers, with Subscriber-level acce...

CVE-2025-9194

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

EUVD-2025-32249

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...

CVE-2025-9212 WP Dispatcher <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-9194 Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a them...