EUVD-2024-34296

Malicious code in bioql PyPI...

EUVD-2025-4753

Malicious code in bioql PyPI...

EUVD-2022-27385

Malicious code in bioql PyPI...

EUVD-2025-19011

Malicious code in bioql PyPI...

EUVD-2023-27942

Malicious code in bioql PyPI...

EUVD-2022-43094

Malicious code in bioql PyPI...

EUVD-2023-26001

Malicious code in bioql PyPI...

EUVD-2025-4450

Malicious code in bioql PyPI...

EUVD-2025-7184

Malicious code in bioql PyPI...

EUVD-2024-16169

Malicious code in bioql PyPI...

EUVD-2023-24110

Malicious code in bioql PyPI...

EUVD-2024-49811

Malicious code in bioql PyPI...

EUVD-2024-54193

Malicious code in bioql PyPI...

EUVD-2024-18738

Malicious code in bioql PyPI...

EUVD-2025-12241

Malicious code in bioql PyPI...

CVE-2025-10302

The Ultimate Viral Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on thesaveoptions function. This makes it possible for unauthenticated attackers to update the plugin's settings...

CVE-2025-9897

CVE-2025-9897 : The WordPress AP Background plugin (versions up to 3.8.2) is affected by a Cross-Site Request Forgery due to missing/incorrect nonce validation in advParallaxBackAdminSaveSlider. Exploitation requires user interaction (social engineering via an admin action), and it can enable una...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

PT-2025-40478

Name of the Vulnerable Software and Affected Versions Customify theme for WordPress version 0.4.11 Description The software is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation in the reset customize section function. This allows unauthenticated attackers to...

CVE-2025-9512 Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments...