EUVD-2022-15658

Malicious code in bioql PyPI...

EUVD-2023-56253

Malicious code in bioql PyPI...

EUVD-2023-31362

Malicious code in bioql PyPI...

EUVD-2023-44805

Malicious code in bioql PyPI...

EUVD-2023-57747

Malicious code in bioql PyPI...

EUVD-2024-47471

Malicious code in bioql PyPI...

EUVD-2025-4027

Malicious code in bioql PyPI...

EUVD-2023-54498

Malicious code in bioql PyPI...

EUVD-2024-52403

Malicious code in bioql PyPI...

EUVD-2025-3016

Malicious code in bioql PyPI...

EUVD-2025-3172

Malicious code in bioql PyPI...

EUVD-2024-25127

Malicious code in bioql PyPI...

EUVD-2025-7963

Malicious code in bioql PyPI...

EUVD-2024-45630

Malicious code in bioql PyPI...

CVE-2025-10168

The Any News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'any-ticker' shortcode in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2025-10168

The Any News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'any-ticker' shortcode in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2025-10168 Any News Ticker <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Any News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'any-ticker' shortcode in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2025-10168

CVE-2025-10168 — WordPress Any News Ticker plugin stores cross-site scripting via the any-ticker shortcode. All versions up to 3.1.1 are affected due to insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires authentic access at contributor level or ...

CVE-2025-10168 Any News Ticker <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Any News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'any-ticker' shortcode in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

WordPress Any News Ticker plugin <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Any News Ticker versions = 3.1.1...