EUVD-2025-18547

Malicious code in bioql PyPI...

EUVD-2025-15469

Malicious code in bioql PyPI...

EUVD-2025-17504

Malicious code in bioql PyPI...

CVE-2025-31919

Deserialization of Untrusted Data vulnerability in themeton Spare allows Object Injection. This issue affects Spare: from n/a through 1.7...

CVE-2025-31919

Deserialization of Untrusted Data vulnerability in themeton Spare allows Object Injection. This issue affects Spare: from n/a through 1.7...

CVE-2025-31919

CVE-2025-31919 affects the Spare (themeton Spare) WordPress theme, with versions n/a through 1.7 vulnerable to Deserialization of Untrusted Data leading to PHP Object Injection. The issue is triggered by untrusted data deserialization in Spare, enabling object injection. The CVSS v3.1 base score ...

PT-2025-25673 · Unknown · Themeton Spare

Name of the Vulnerable Software and Affected Versions: themeton Spare versions n/a through 1.7 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For themeton Spare versions n/a through 1.7, update to a version that fixes the...

CVE-2025-31638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeton Spare allows Reflected XSS. This issue affects Spare: from n/a through 1.7...

CVE-2025-31638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeton Spare allows Reflected XSS. This issue affects Spare: from n/a through 1.7...

CVE-2025-31638

CVE-2025-31638: Reflected XSS in Spare theme for WordPress (themeton Spare). Description shows improper input neutralization during web page generation, affecting Spare versions up to 1.7. Connected sources confirm the vulnerability details but do not provide a patch or fixed version. Affected pr...

PT-2025-24488 · Unknown · Themeton Spare

Name of the Vulnerable Software and Affected Versions: themeton Spare versions n/a through 1.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

CVE-2025-31639

Cross-Site Request Forgery CSRF vulnerability in themeton Spare allows Cross Site Request Forgery. This issue affects Spare: from n/a through 1.7...

CVE-2025-31639

Cross-Site Request Forgery CSRF vulnerability in themeton Spare allows Cross Site Request Forgery. This issue affects Spare: from n/a through 1.7...

CVE-2025-31639

CVE-2025-31639 is a CSRF vulnerability in the Spare theme (themeton Spare) affecting versions n/a through 1.7. Public documents confirm CSRF can enable unauthorized actions on behalf of a user. The NVD entry lists CVSS v3.1 base score 4.3 (Medium) with Network attack vector, Low integrity/availab...

PT-2025-21675 · Themeton · Themeton Spare

Name of the Vulnerable Software and Affected Versions: themeton Spare versions n/a through 1.7 Description: A Cross-Site Request Forgery CSRF issue affects themeton Spare, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For themeton Spare versions n/a through...