EUVD-2025-21845

Malicious code in bioql PyPI...

EUVD-2023-58961

Malicious code in bioql PyPI...

EUVD-2022-51793

Malicious code in bioql PyPI...

EUVD-2022-44806

Malicious code in bioql PyPI...

EUVD-2024-17078

Malicious code in bioql PyPI...

EUVD-2024-48100

Malicious code in bioql PyPI...

EUVD-2024-27602

Malicious code in bioql PyPI...

EUVD-2024-49732

Malicious code in bioql PyPI...

EUVD-2023-44109

Malicious code in bioql PyPI...

EUVD-2023-33892

Malicious code in bioql PyPI...

EUVD-2025-7190

Malicious code in bioql PyPI...

EUVD-2022-34774

Malicious code in bioql PyPI...

EUVD-2023-34066

Malicious code in bioql PyPI...

EUVD-2024-47503

Malicious code in bioql PyPI...

EUVD-2023-34073

Malicious code in bioql PyPI...

EUVD-2022-51560

Malicious code in bioql PyPI...

CVE-2025-9209

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

CVE-2025-7721

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the...

CVE-2025-9129 Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode

The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-tag shortcode in all versions up to, and including, 4.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-8669 Customify <= 0.4.11 - Cross-Site Request Forgery

The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the resetcustomizesection function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged...