EUVD-2019-6610

Malware in sbrugna...

EUVD-2020-24178

Malware in sbrugna...

EUVD-2013-2078

Malware in sbrugna...

EUVD-2019-6776

Malware in sbrugna...

EUVD-2024-16002

Malicious code in bioql PyPI...

EUVD-2024-51601

Malicious code in bioql PyPI...

EUVD-2021-34248

Malicious code in bioql PyPI...

EUVD-2024-34109

Malicious code in bioql PyPI...

EUVD-2023-54482

Malicious code in bioql PyPI...

WordPress Affiliate Plus plugin <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Affiliate Plus versions = 1.3.2...

CVE-2025-8103

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.7. This is due to missing nonce validation in the handlefeedbacksubmission function. This makes it possible for unauthenticated attackers to deactivate the...

WordPress Omnishop plugin <= 1.0.9 - Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint vulnerability

Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint vulnerability discovered by ch4r0n in WordPress Plugin Omnishop versions = 1.0.9...

CVE-2025-7687

The CVE-2025-7687 entry concerns the WordPress plugin Latest Post Accordian Slider. A CSRF vulnerability exists in all versions up to 1.3 due to missing/incorrect nonce validation on the lpaccordian page. This enables unauthenticated attackers to update settings and inject malicious scripts throu...

WordPress yContributors plugin <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin yContributors versions = 0.5...

WordPress RD Contacto plugin <= 1.4 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin RD Contacto versions = 1.4...

WordPress Burst Statistics plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Burst Statistics versions = 2.0.6...

CVE-2025-53269 WordPress My Wp Brand plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in imw3 My Wp Brand my-wp-brand allows Cross Site Request Forgery.This issue affects My Wp Brand: from n/a through = 1.1.3...

CVE-2025-53261 WordPress WP YouTube Live plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in macbookandrew WP YouTube Live wp-youtube-live allows Cross Site Request Forgery.This issue affects WP YouTube Live: from n/a through = 1.10.0...

WordPress VR Calendar plugin <= 2.4.7 - Cross-Site Request Forgery to Calendar Sync vulnerability

Cross-Site Request Forgery to Calendar Sync vulnerability discovered by Nabil Irawan in WordPress Plugin VR Calendar versions = 2.4.7...

WordPress WP-Recall plugin <= 16.26.14 - CSRF to Privilege Escalation vulnerability

CSRF to Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP-Recall versions = 16.26.14...