EUVD-2024-16174

Malicious code in bioql PyPI...

EUVD-2022-34709

Malicious code in bioql PyPI...

EUVD-2025-13997

Malicious code in bioql PyPI...

EUVD-2021-34178

Malicious code in bioql PyPI...

EUVD-2025-21583

Malicious code in bioql PyPI...

EUVD-2024-29238

Malicious code in bioql PyPI...

EUVD-2024-48113

Malicious code in bioql PyPI...

EUVD-2022-51953

Malicious code in bioql PyPI...

EUVD-2024-17282

Malicious code in bioql PyPI...

EUVD-2023-58567

Malicious code in bioql PyPI...

EUVD-2022-52202

Malicious code in bioql PyPI...

EUVD-2023-58059

Malicious code in bioql PyPI...

EUVD-2025-6623

Malicious code in bioql PyPI...

EUVD-2022-35653

Malicious code in bioql PyPI...

EUVD-2023-34066

Malicious code in bioql PyPI...

CVE-2025-9209

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

CVE-2025-7721

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the...

CVE-2025-9129 Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode

The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-tag shortcode in all versions up to, and including, 4.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-8669 Customify <= 0.4.11 - Cross-Site Request Forgery

The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the resetcustomizesection function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged...

CVE-2025-8669 Customify <= 0.4.11 - Cross-Site Request Forgery

The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the resetcustomizesection function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged...