EUVD-2024-49087

Malicious code in bioql PyPI...

EUVD-2024-48609

Malicious code in bioql PyPI...

EUVD-2024-49806

Malicious code in bioql PyPI...

EUVD-2023-57383

Malicious code in bioql PyPI...

EUVD-2024-34985

Malicious code in bioql PyPI...

EUVD-2024-50047

Malicious code in bioql PyPI...

EUVD-2024-19313

Malicious code in bioql PyPI...

EUVD-2024-33221

Malicious code in bioql PyPI...

EUVD-2025-6411

Malicious code in bioql PyPI...

EUVD-2025-13576

Malicious code in bioql PyPI...

EUVD-2025-16743

Malicious code in bioql PyPI...

EUVD-2025-14597

Malicious code in bioql PyPI...

EUVD-2025-30884

Malicious code in bioql PyPI...

CVE-2025-10302

The Ultimate Viral Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on thesaveoptions function. This makes it possible for unauthenticated attackers to update the plugin's settings...

CVE-2025-9897

CVE-2025-9897 : The WordPress AP Background plugin (versions up to 3.8.2) is affected by a Cross-Site Request Forgery due to missing/incorrect nonce validation in advParallaxBackAdminSaveSlider. Exploitation requires user interaction (social engineering via an admin action), and it can enable una...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

CVE-2025-9200: Improper Neutralization of Special Elements used in an SQL Command

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

PT-2025-40478

Name of the Vulnerable Software and Affected Versions Customify theme for WordPress version 0.4.11 Description The software is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation in the reset customize section function. This allows unauthenticated attackers to...

CVE-2025-40645: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-9512 Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments...