EUVD-2024-44444

Malicious code in bioql PyPI...

EUVD-2023-33810

Malicious code in bioql PyPI...

EUVD-2024-31638

Malicious code in bioql PyPI...

EUVD-2023-58031

Malicious code in bioql PyPI...

EUVD-2024-32304

Malicious code in bioql PyPI...

EUVD-2024-27894

Malicious code in bioql PyPI...

EUVD-2025-19861

Malicious code in bioql PyPI...

EUVD-2024-32383

Malicious code in bioql PyPI...

EUVD-2024-53963

Malicious code in bioql PyPI...

EUVD-2024-54446

Malicious code in bioql PyPI...

EUVD-2024-32320

Malicious code in bioql PyPI...

EUVD-2025-19548

Malicious code in bioql PyPI...

EUVD-2025-13663

Malicious code in bioql PyPI...

EUVD-2025-19257

Malicious code in bioql PyPI...

CVE-2025-4685

The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attributes of multiple widgets, in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This make...

CVE-2025-7658

The Temporarily Hidden Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'temphc-start' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-6488

The isMobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-6540

The web-cam plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above,...

CVE-2025-6540

CVE-2025-6540 relates to the WordPress plugin “web-cam” (versions up to 1.0). It is a Stored Cross-Site Scripting (Stored XSS) vulnerability via the slug parameter caused by insufficient input sanitization and output escaping. Exploitation requires at least Contributor-level authentication, and t...

CVE-2025-5699

CVE-2025-5699 involves the Developer Formatter WordPress plugin. A stored cross-site scripting (XSS) flaw exists in Custom CSS handling across all versions up to 2015.0.2.1, caused by insufficient input sanitization and output escaping. Exploitation requires authenticated admin-level access and c...