EUVD-2024-27792

Malicious code in bioql PyPI...

EUVD-2024-34249

Malicious code in bioql PyPI...

EUVD-2024-51101

Malicious code in bioql PyPI...

EUVD-2024-17145

Malicious code in bioql PyPI...

EUVD-2024-48464

Malicious code in bioql PyPI...

EUVD-2024-47089

Malicious code in bioql PyPI...

EUVD-2024-54069

Malicious code in bioql PyPI...

EUVD-2025-7557

Malicious code in bioql PyPI...

EUVD-2024-54170

Malicious code in bioql PyPI...

EUVD-2024-44505

Malicious code in bioql PyPI...

EUVD-2024-46796

Malicious code in bioql PyPI...

EUVD-2024-47021

Malicious code in bioql PyPI...

EUVD-2022-43186

Malicious code in bioql PyPI...

EUVD-2024-54111

Malicious code in bioql PyPI...

EUVD-2024-51158

Malicious code in bioql PyPI...

EUVD-2024-16470

Malicious code in bioql PyPI...

WordPress Tourimo theme <= 1.2.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Tourimo versions = 1.2.3...

CVE-2025-8595

Summary of CVE-2025-8595 (Zakra WordPress theme) : The Zakra theme is vulnerable to unauthorized data modification due to a missing capability check in welcome_notice_import_handler(), affecting all versions up to 4.1.5. This allows authenticated attackers with Subscriber-level access and above t...

WordPress UpStore Theme <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)

Software UpStore Type Theme Vulnerable versions = 1.7.0 Fixed in 1.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-48296 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 78b49b9e10bc Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress Exertio Theme <= 1.3.2 is vulnerable to PHP Object Injection

Software Exertio Type Theme Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-54686 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID d25a71f8c070 Credits Aiden Required privilege Unauthenticated Publishe...