CVE-2025-11267

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'veucustomcss' parameter in all versions up to, and including, 9.112.1. This is due to insufficient input sanitization and output escaping on the user-supplied Custom CSS value. This makes i...

EUVD-2014-5709

Malware in sbrugna...

EUVD-2014-5807

Malware in sbrugna...

EUVD-2024-45832

Malicious code in bioql PyPI...

EUVD-2023-31651

Malicious code in bioql PyPI...

EUVD-2023-31649

Malicious code in bioql PyPI...

EUVD-2024-22295

Malicious code in bioql PyPI...

EUVD-2023-37283

Malicious code in bioql PyPI...

EUVD-2023-12624

Malicious code in bioql PyPI...

EUVD-2025-9849

Malicious code in bioql PyPI...

EUVD-2023-31652

Malicious code in bioql PyPI...

EUVD-2024-30612

Malicious code in bioql PyPI...

EUVD-2023-32064

Malicious code in bioql PyPI...

EUVD-2023-12623

Malicious code in bioql PyPI...

EUVD-2024-36912

Malicious code in bioql PyPI...

Malicious code in vk-hr-tek (npm)

The package vk-hr-tek was found to contain malicious code...

Malicious code in vk-teams-bridge (npm)

The package vk-teams-bridge was found to contain malicious code...

MAL-2025-38522 Malicious code in vk-hr-tek (npm)

The package vk-hr-tek was found to contain malicious code...

MAL-2025-38523 Malicious code in vk-teams-bridge (npm)

The package vk-teams-bridge was found to contain malicious code...

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...