EUVD-2023-54775

Malicious code in bioql PyPI...

EUVD-2023-57911

Malicious code in bioql PyPI...

EUVD-2025-23317

Malicious code in bioql PyPI...

EUVD-2025-1640

Malicious code in bioql PyPI...

EUVD-2022-42777

Malicious code in bioql PyPI...

EUVD-2024-30604

Malicious code in bioql PyPI...

EUVD-2025-15566

Malicious code in bioql PyPI...

EUVD-2025-22477

Malicious code in bioql PyPI...

EUVD-2023-33937

Malicious code in bioql PyPI...

EUVD-2023-33807

Malicious code in bioql PyPI...

EUVD-2024-31654

Malicious code in bioql PyPI...

EUVD-2023-12442

Malicious code in bioql PyPI...

EUVD-2025-18239

Malicious code in bioql PyPI...

EUVD-2025-18233

Malicious code in bioql PyPI...

EUVD-2023-23686

Malicious code in bioql PyPI...

EUVD-2023-54153

Malicious code in bioql PyPI...

CVE-2025-9209

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

CVE-2025-7721

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the...

CVE-2025-9129 Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode

The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-tag shortcode in all versions up to, and including, 4.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-8669 Customify <= 0.4.11 - Cross-Site Request Forgery

The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the resetcustomizesection function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged...