CVE-2025 list

CVE-2025 records published in April 2025

Page two of four: records 1,001 to 2,000 of the 3,694 published in April 2025, newest first. The first page carries the figures for April 2025.

CVE-2025 records published in April 2025, newest first: records 1,001 to 2,000 of 3,694
CVE Summary CVSS EPSS Published Signals
CVE-2025-32649GB Gallery Slideshow WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32648Projectopia WordPress plugin privilege escalation9.8CNA v3.10.4%2025-04-17
CVE-2025-32647Question Answer WordPress plugin PHP object injection8.8CNA v3.10.5%2025-04-17
CVE-2025-32646Question Answer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32639Affiliate Links WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32638Weptile Mobile App for WooCommerce stored cross-site scripting7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32637WP Donate WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32636Local Magic WordPress plugin SQL injection9.3CNA v3.10.4%2025-04-17
CVE-2025-32635Hive Support WordPress plugin sensitive data exposure7.5CNA v3.10.5%2025-04-17Fix
CVE-2025-32634Run Contests, Raffles, and Giveaways WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32630WP-BusinessDirectory WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32628Crowdfunding for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32626JS Job Manager WordPress plugin SQL injection9.8v3.10.5%2025-04-17
CVE-2025-32625Mobile Blocks WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32622OTP-less one tap Sign in WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32620Doppler Forms WordPress plugin broken access control7.1CNA v3.10.4%2025-04-17Fix
CVE-2025-32615Clinked Client Portal WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32613Debug Log Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32611WooCommerce TBC Credit Card Payment Gateway WordPress plugin reflected cross-site scripting7.1CNA v3.10.3%2025-04-17
CVE-2025-32609Verowa Connect WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32608Movylo Marketing Automation WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32606Listings for Buildium WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-04-17Fix
CVE-2025-32605MemberPress Discord Addon WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32604AWSA Shipping WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32602WooMS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32596Real Estate Manager WordPress plugin arbitrary code execution7.3CNA v3.10.4%2025-04-17
CVE-2025-32594Simple WP Events WordPress plugin sensitive data exposure7.5CNA v3.10.5%2025-04-17Fix
CVE-2025-32593Bytes Technolab Add Product Frontend for WooCommerce content deletion missing authorization8.2CNA v3.10.4%2025-04-17Fix
CVE-2025-32592TableOn WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32590Web2application WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32588Credova_Financial WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32583PDF 2 Post WordPress plugin remote code execution (RCE)9.9CNA v3.120.3%2025-04-17Exploit code
CVE-2025-32582WP AutoKeyword WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32578Coming Soon Countdown WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32573KiotViet Sync WordPress plugin SQL injection8.5CNA v3.10.4%2025-04-17Fix
CVE-2025-32572Kata Plus WordPress plugin PHP object injection9.8CNA v3.10.6%2025-04-17Fix
CVE-2025-32571TuriTop Booking System WordPress plugin PHP object injection8.8CNA v3.10.6%2025-04-17Fix
CVE-2025-32566License For Envato WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32564Stop Registration Spam WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32562WP Easy Poll WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32561WP_DEBUG Toggle WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32560WP-Hijri WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32557WP Featured Screenshot WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32554Raptive Ads WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32552MSRP (RRP) Pricing for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32548Hamburger Icon Menu Lite WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32546All push notification for WP WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-17
CVE-2025-32545WooCommerce Products without featured images WordPress plugin CSRF to reflected cross-site scripting7.1CNA v3.10.2%2025-04-17
CVE-2025-32544WooCommerce Loyal Customers WordPress plugin broken access control7.5CNA v3.10.4%2025-04-17
CVE-2025-32540Feedify Web Push Notifications WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32535DN Shipping by Weight for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32533Deliver via Shipos for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32532UXsniff WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32531Arconix FAQ WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32530Wallet System for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32529iONE360 configurator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32528iCal Feeds WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32527T&P Gallery Slider WordPress plugin stored cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32526Zephyr Project Manager WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2025-04-17Fix
CVE-2025-32522License Manager for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32521Cool Flipbox WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32520WordPress Health and Server Condition plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32516Related Videos for JW Player WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32515Terminal Africa WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32514WooCommerce Estimate and Quote WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32513Total processing card payments for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32512Revamp CRM for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32511Excellent Dynamics Make Email Customizer for WooCommerce reflected cross-site scripting7.1CNA v3.10.3%2025-04-17
CVE-2025-32508Course Booking System WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32507Event Espresso WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32506AT Internet SmartTag WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32504Silvasoft boekhouden WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-32490wp secure WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-32415libxml2 improper quantity validation7.5v3.10.6%2025-04-17Fix
CVE-2025-31380Paid Videochat Turnkey Site WordPress plugin broken authentication9.8CNA v3.10.6%2025-04-17Fix
CVE-2025-31340Wisdom Master Pro improper control of filename for include/require statement in PHP program9.9CNA v4.00.5%2025-04-17
CVE-2025-31339Wisdom Master Pro unrestricted upload of file with dangerous type5.3CNA v4.00.4%2025-04-17
CVE-2025-31338Wisdom Master Pro missing authorization6.9CNA v4.00.5%2025-04-17
CVE-2025-31030Ray Enterprise Translation WordPress plugin local file inclusion via CSRF7.5CNA v3.10.7%2025-04-17Fix
CVE-2025-31018FireDrum Email Marketing WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-31006Activity Reactions For Buddypress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-29931Siemens TeleControl Server Basic improper length parameter handling6.3CNA v4.00.4%2025-04-17Fix
CVE-2025-29722Yassmittal Commercify cross-site request forgery6.3CISA ADP v3.10.2%2025-04-17
CVE-2025-29662Landchat core application remote code execution9.8CISA ADP v3.10.6%2025-04-17
CVE-2025-29661Litepublisher Litepubl Cms code injection7.2CISA ADP v3.10.5%2025-04-17
CVE-2025-29461appleple a-blog cms server-side request forgery7.6CISA ADP v3.10.4%2025-04-17
CVE-2025-29460mybb server-side request forgery7.6CISA ADP v3.10.4%2025-04-17
CVE-2025-29459mybb server-side request forgery7.6CISA ADP v3.10.4%2025-04-17
CVE-2025-29458mybb server-side request forgery7.6CISA ADP v3.10.4%2025-04-17
CVE-2025-29457mybb server-side request forgery7.6CISA ADP v3.10.4%2025-04-17
CVE-2025-29456personal-management-system server-side request forgery6.5CISA ADP v3.10.4%2025-04-17
CVE-2025-29455personal-management-system server-side request forgery6.5CISA ADP v3.10.4%2025-04-17
CVE-2025-29454personal-management-system server-side request forgery6.5CISA ADP v3.10.4%2025-04-17
CVE-2025-29453personal-management-system server-side request forgery6.5CISA ADP v3.10.4%2025-04-17
CVE-2025-29452SEO Panel server-side request forgery7.6CISA ADP v3.10.4%2025-04-17
CVE-2025-29451SEO Panel server-side request forgery7.6CISA ADP v3.10.4%2025-04-17
CVE-2025-29450LM21 Twonav server-side request forgery6.5CISA ADP v3.10.4%2025-04-17
CVE-2025-29449LM21 Twonav server-side request forgery6.5CISA ADP v3.10.4%2025-04-17
CVE-2025-29316DataPatrol Screenshot watermark, printing watermark agent information disclosure6.2CISA ADP v3.10.2%2025-04-17
CVE-2025-29181FoxCMS SQL injection7.2CISA ADP v3.10.4%2025-04-17
CVE-2025-29180FoxCMS SQL injection7.2CISA ADP v3.10.4%2025-04-17
CVE-2025-29047Alfa Wifi Camppro buffer overflow9.8CISA ADP v3.11.1%2025-04-17
CVE-2025-29046Alfa Wifi Camppro buffer overflow9.8CISA ADP v3.11.1%2025-04-17
CVE-2025-29045Alfa Wifi Camppro buffer overflow9.8CISA ADP v3.11.1%2025-04-17
CVE-2025-29044NETGEAR R6100 buffer overflow9.8CISA ADP v3.11.1%2025-04-17
CVE-2025-29043D-Link DIR-823X OS command injection9.8CISA ADP v3.11.8%2025-04-17
CVE-2025-29042D-Link DIR-823X OS command injection9.8CISA ADP v3.12.3%2025-04-17
CVE-2025-29041D-Link DIR-823X OS command injection9.8CISA ADP v3.11.4%2025-04-17
CVE-2025-29040D-Link DIR-823X OS command injection9.8CISA ADP v3.11.4%2025-04-17
CVE-2025-29039D-Link DIR-823X code injection7.2CISA ADP v3.11.3%2025-04-17
CVE-2025-29015CodeAstro Internet Banking System cross-site scripting6.1CISA ADP v3.10.3%2025-04-17
CVE-2025-28101DogukanUrker FlaskBlog cross-site request forgery6.5CISA ADP v3.10.2%2025-04-17
CVE-2025-28009Appventure Dietiqa SQL injection9.8CISA ADP v3.10.5%2025-04-17Exploit code
CVE-2025-27354Simple Email Subscriber WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27346Rebuild Permalinks WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27345Booking Ultra Pro WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-27343WooCommerce HTML5 Video WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27338List Urls WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27337Fontsampler WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27333Protected wp-login WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-2732417TRACK for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27322QR Code for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27319User List WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27314Kush Micro News WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27313Google Maps GPX Viewer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27310Page and Post Lister WordPress plugin arbitrary content deletion vulnerability6.5CNA v3.10.4%2025-04-17
CVE-2025-27309flickr-slideshow-wrapper WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27308WP Video Posts WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27302CHATLIVE WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-17
CVE-2025-27299MyTicket Events WordPress plugin Non-arbitrary file read5.3CNA v3.10.4%2025-04-17
CVE-2025-27295Live css WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27293Shipmozo Courier Tracking WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27292WPYog Documents WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-27291Photo Gallery Image Gallery WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27289Antoine Guillien Restrict Taxonomies reflected cross-site scripting7.1CNA v3.10.3%2025-04-17
CVE-2025-27288File Icons WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27287SS Quiz WordPress plugin PHP object injection9.8CNA v3.10.6%2025-04-17
CVE-2025-27286Saoshyant Slider WordPress plugin PHP object injection9.8CNA v3.10.6%2025-04-17
CVE-2025-27285Easy Form by AYS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-27284Flagged Content WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-27283Theme File Duplicator WordPress plugin arbitrary file download6.5CNA v3.10.5%2025-04-17
CVE-2025-27282Theme File Duplicator WordPress plugin arbitrary file upload9.9CNA v3.10.5%2025-04-17
CVE-2025-26968WordPress Cloak Front End Email plugin broken access control7.5CNA v3.10.4%2025-04-17Fix
CVE-2025-26478Dell ECS improper certificate validation3.1CNA v3.10.1%2025-04-17Fix
CVE-2025-26477Dell ECS improper input validation4.3CNA v3.10.4%2025-04-17Fix
CVE-2025-26269dragonflydb dragonfly integer underflow5.5v3.10.3%2025-04-17
CVE-2025-26268dragonflydb dragonfly denial of service6.5v3.10.4%2025-04-17Fix
CVE-2025-25457Tenda AC10 stack-based buffer overflow7.5CISA ADP v3.10.7%2025-04-17
CVE-2025-25455Tenda AC10 stack-based buffer overflow7.5CISA ADP v3.10.6%2025-04-17
CVE-2025-25454Tenda AC10 stack-based buffer overflow7.5CISA ADP v3.10.6%2025-04-17
CVE-2025-25234Omnissa Unified Access Gateway (UAG) permissive cross-domain policy7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24752Essential Addons for Elementor WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.11.2%2025-04-17NucleiExploit codeFix
CVE-2025-24745Classified Listing WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24737WP Helper Premium WordPress plugin broken access control6.5CNA v3.10.3%2025-04-17Fix
CVE-2025-24670Term Taxonomy Converter WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24655Wishlist WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24651WebToffee WP Backup and Migration WordPress plugin sensitive data exposure5.9CNA v3.10.4%2025-04-17Fix
CVE-2025-24645Eazy Under Construction WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24640Empty Tags Remover WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24637Beacon Lead Magnets and Lead Capture WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24624HT Event WordPress Event Manager Plugin for Elementor reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24621Arconix Shortcodes WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24619WP Log Action WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24586Shipment Tracker for Woocommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-2458312 Step Meeting List WordPress plugin settings Change vulnerability6.5CNA v3.10.4%2025-04-17Fix
CVE-2025-24581Instantio WordPress plugin settings Change vulnerability6.5CNA v3.10.4%2025-04-17Fix
CVE-2025-24577Poll Maker WordPress plugin broken access control9.8v3.10.4%2025-04-17Fix
CVE-2025-24553Shipping with Venipak for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24550Job Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-17Fix
CVE-2025-24548Autoglot Automatic WordPress Translation plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-24539DeBounce Email Validator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-23958Editor Wysiwyg Background Color WordPress plugin broken access control6.5CNA v3.10.4%2025-04-17
CVE-2025-23906WordPress Dashboard Tweeter plugin settings Change vulnerability6.5CNA v3.10.4%2025-04-17
CVE-2025-23858Custom Users Order WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-23855SpiderDisplay WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-23782TotalContest Lite WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-23773Delete All Posts WordPress plugin broken access control6.5CNA v3.10.4%2025-04-17
CVE-2025-23448visualslider Sldier WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-23443Author Showcase WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-22796WP-Asambleas WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-22774CRUDLab Scroll to Top WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-22771The Great Firewords of China WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-17
CVE-2025-22692Sponsered Link WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-22655CWD - Stealth Links WordPress plugin SQL injection9.3CNA v3.10.4%2025-04-17
CVE-2025-22651Stylish Google Sheet Reader WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17Fix
CVE-2025-22636VR-Frases WordPress plugin reflected XSS to SQL injection8.2CNA v3.10.4%2025-04-17Fix
CVE-2025-22565vooPlayer v4 WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-17
CVE-2025-22340Data Dash WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-17
CVE-2025-3765SourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted upload8.8v3.10.6%2025-04-17
CVE-2025-3764SourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload8.8v3.10.6%2025-04-17
CVE-2025-3763SourceCodester Phone Management System Password main buffer overflow7.8v3.10.4%2025-04-17
CVE-2025-3762PCMan FTP Server MPUT command buffer overflow9.8v3.10.8%2025-04-17
CVE-2025-3760Liferay cross-site scripting4.8CNA v4.00.3%2025-04-17Fix
CVE-2025-3651Command injection in iManage Work Desktop for Mac's agent service9.3CNA v4.00.3%2025-04-17Fix
CVE-2025-3615Fluent Forms WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-04-17Fix
CVE-2025-3509GitHub Enterprise Server pre-receive hook remote code execution7.1CNA v4.01.3%2025-04-17Fix
CVE-2025-3487Forminator WordPress plugin authenticated (Contributor+) stored cross-site scripting via limit5.4v3.10.3%2025-04-17Fix
CVE-2025-3479Forminator WordPress plugin order Replay vulnerability5.3CNA v3.10.2%2025-04-17Fix
CVE-2025-3453Password Protected WordPress plugin information disclosure5.3CNA v3.10.4%2025-04-17Fix
CVE-2025-3295WP Editor WordPress plugin authenticated (Administrator+) directory traversal to arbitrary file read4.9CNA v3.10.5%2025-04-17Fix
CVE-2025-3294WP Editor WordPress plugin directory traversal to arbitrary file update7.2CNA v3.11.0%2025-04-17Fix
CVE-2025-3246GitHub Enterprise Server Markdown math block sanitization cross-site scripting8.6CNA v4.00.3%2025-04-17Fix
CVE-2025-3124GitHub Enterprise Server Security Overview missing authorization5.3CNA v4.00.4%2025-04-17Fix
CVE-2025-3113Improper access control in Delphix Masking Engine9.0CNA v4.00.3%2025-04-17Fix
CVE-2025-2947IBM i privilege escalation7.2CNA v3.10.4%2025-04-17Fix
CVE-2025-2903Perforce Delphix unsafe privilege definition8.5CNA v4.00.2%2025-04-17
CVE-2025-2197Honor com. hihonor.baidu.browser type confusion vulnerability in Browser4.3CNA v3.10.3%2025-04-17Fix
CVE-2025-2188Honor GameCenter whitelist mechanism authentication bypass by spoofing8.1CNA v3.10.3%2025-04-17Fix
CVE-2025-1532Code injection vulnerability in Phoneservice8.1CNA v3.10.3%2025-04-17Fix
CVE-2025-1525Ultimate Dashboard WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-04-17Fix
CVE-2025-1524Ultimate Dashboard WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-04-17Fix
CVE-2025-1523Ultimate Dashboard WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-04-17Fix
CVE-2025-1290Google ChromeOS race condition8.1CISA ADP v3.10.3%2025-04-17Fix
CVE-2025-43704Veritas Data Insight cleartext transmission of sensitive information4.7CNA v3.10.1%2025-04-16Fix
CVE-2025-43703Ankitects Anki shared deck internal API vulnerability5.4v3.10.2%2025-04-16
CVE-2025-39602WooCommerce Product Table Lite WordPress plugin broken access control4.3CNA v3.10.3%2025-04-16Fix
CVE-2025-39601Custom CSS, JS and PHP WordPress plugin CSRF to RCE9.6CNA v3.10.3%2025-04-16Exploit codeFix
CVE-2025-39600Integration for WooCommerce and QuickBooks WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-16Fix
CVE-2025-39599Listdom WordPress plugin open redirection4.7CNA v3.10.4%2025-04-16Fix
CVE-2025-39598Administrator Z WordPress plugin directory traversal4.9CNA v3.10.7%2025-04-16Fix
CVE-2025-39597Fast eBay Listings WordPress plugin open redirection4.7CNA v3.10.4%2025-04-16Fix
CVE-2025-39593Ever Accounting WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-16Fix
CVE-2025-39592Subscribe to Unlock Lite WordPress plugin local file inclusion7.5CNA v3.10.9%2025-04-16Fix
CVE-2025-39591WP Subscription Forms WordPress plugin broken access control5.4CNA v3.10.4%2025-04-16Fix
CVE-2025-39590Essential Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39589Essential Addons for Elementor WordPress plugin sensitive data exposure4.3CNA v3.10.4%2025-04-16Fix
CVE-2025-39585Travelfic Toolkit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39584Eventin WordPress plugin local file inclusion7.5CNA v3.10.9%2025-04-16Fix
CVE-2025-39582WP Data Access WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39581Themify Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39579Membership For WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39578Responsive Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39577PropertyHive WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39576WPAdverts WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39575WPCasa WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39574Uix Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39573WP Posts Carousel WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39572Checkout for PayPal WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39571WowStore WordPress plugin broken access control4.3CNA v3.10.4%2025-04-16Fix
CVE-2025-39570WPCOM Member WordPress plugin local file inclusion8.8CNA v3.10.8%2025-04-16Fix
CVE-2025-39566Hostel WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-16Fix
CVE-2025-39565MelaPress Login Security WordPress plugin PHP object injection7.2v3.10.9%2025-04-16Fix
CVE-2025-39564Conditional Shipping for WooCommerce WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39563Conditional Payments for WooCommerce WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.3%2025-04-16Fix
CVE-2025-39560Live Forms WordPress plugin broken access control5.4CNA v3.10.4%2025-04-16Fix
CVE-2025-39557Kadence WooCommerce Email Designer WordPress plugin arbitrary file upload9.1CNA v3.10.6%2025-04-16Fix
CVE-2025-39556Mediavine Control Panel WordPress plugin sensitive data exposure5.3CNA v3.10.5%2025-04-16Fix
CVE-2025-39555Church Admin WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39552Zephyr Project Manager WordPress plugin broken access control5.4CNA v3.10.4%2025-04-16Fix
CVE-2025-39549Most And Least Read Posts Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39548Right Click Disable OR Ban WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-16Fix
CVE-2025-39547Internal Link Optimiser WordPress plugin CSRF to XSS7.1CNA v3.10.2%2025-04-16Fix
CVE-2025-39546ElementsReady Addons for Elementor WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-16Fix
CVE-2025-39545REST API Authentication WordPress plugin settings Change vulnerability5.4CNA v3.10.5%2025-04-16Fix
CVE-2025-39544WP Tools WordPress plugin CSRF to arbitrary file deletion7.4CNA v3.10.3%2025-04-16Fix
CVE-2025-39543Royal Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39540WP Flipclock WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39538WP-Advanced-Search WordPress plugin arbitrary file upload6.6CNA v3.10.5%2025-04-16Exploit code
CVE-2025-39531Slazzer Background Changer WordPress plugin broken access control5.3CNA v3.10.6%2025-04-16
CVE-2025-39530Site Search 360 WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.2%2025-04-16
CVE-2025-39529Scriptless Social Sharing WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39528Rescue Shortcodes WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-04-16Fix
CVE-2025-39525Logo Carousel Slider WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16
CVE-2025-39524Html5 Audio Player WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39522Dynamic Post WordPress plugin settings Change vulnerability5.4CNA v3.10.4%2025-04-16Fix
CVE-2025-39520Checkout Files Upload for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39518BMA Lite WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-16Fix
CVE-2025-39517Basic Interactive World Map WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.2%2025-04-16
CVE-2025-39516Author WIP Progress Bar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16
CVE-2025-39515Attendance Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16
CVE-2025-39514Asgaros Forum WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-39513ActiveDEMAND WordPress plugin broken access control5.3CNA v3.10.6%2025-04-16Fix
CVE-2025-39512Bulk Term Editor WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-16
CVE-2025-39472WooCommerce Social Login WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-04-16Fix
CVE-2025-32872Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32871Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32870Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32869Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.4%2025-04-16Fix
CVE-2025-32868Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.4%2025-04-16Fix
CVE-2025-32867Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32866Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32865Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32864Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32863Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32862Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32861Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32860Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32859Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32858Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32857Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32856Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32855Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32854Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32853Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32852Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32851Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32850Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32849Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32848Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.7%2025-04-16Fix
CVE-2025-32847Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32846Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32845Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32844Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32843Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32842Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32841Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32840Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32839Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32838Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32837Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32836Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32835Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32834Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32833Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32832Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32831Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32830Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32829Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32828Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32827Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32826Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32825Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32824Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32823Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32822Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32817SonicWall Connect Tunnel link following6.1CISA ADP v3.10.4%2025-04-16Fix
CVE-2025-32791Permission policy information leakage in Backstage permission system4.3CNA v3.10.3%2025-04-16Fix
CVE-2025-32789EspoCRM allows potential Disclosure of Sensitive Information in the User Sorting function3.1CNA v3.10.4%2025-04-16Fix
CVE-2025-32787SoftEther VPN SoftEtherVPN Affected by null dereference in DeleteIPv6DefaultRouterInRA3.1CNA v3.10.4%2025-04-16
CVE-2025-32783XWiki Platform Message Stream notifications vulnerability4.7CNA v3.10.3%2025-04-16
CVE-2025-32475Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-32433Erlang Erlang/OTP SSH Server missing authentication for critical function10.0CNA v3.198.8%2025-04-16KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-32385EspoCRM allows unrestricted Embedding in Iframe dashlet5.3CNA v3.10.3%2025-04-16Fix
CVE-2025-31478Zulip Authentication Backend Configuration Bypass8.2CNA v3.10.4%2025-04-16Fix
CVE-2025-31363Mattermost data exfiltration via AI plugin Jira tool3.0CNA v3.10.3%2025-04-16Fix
CVE-2025-31353Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-31352Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.8%2025-04-16Fix
CVE-2025-31351Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-31350Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-31349Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-31343Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-31201Apple Multiple Products arbitrary read and write9.8CISA ADP v3.114.0%2025-04-16KEVFix
CVE-2025-31200Apple Multiple Products memory corruption9.8CISA ADP v3.120.9%2025-04-16KEVExploit codeFix
CVE-2025-30960FS Poster WordPress plugin Subscriber+ site Wide broken access control8.3CNA v3.10.3%2025-04-16Fix
CVE-2025-30215NATS-Server fails to Authorize certain Jetstream Admin APIs9.6CNA v3.10.6%2025-04-16Fix
CVE-2025-30100Dell Alienware Command Center (AWCC) improper access control6.7CNA v3.10.1%2025-04-16Fix
CVE-2025-30032Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-30031Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-30030Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-30003Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-30002Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-29905Siemens TeleControl Server Basic SQL injection8.7CNA v4.00.9%2025-04-16Fix
CVE-2025-29710Torrahclef Company Website CMS cross-site scripting6.1CISA ADP v3.10.3%2025-04-16
CVE-2025-29709Torrahclef Company Website CMS external control of a file path9.8CISA ADP v3.10.6%2025-04-16
CVE-2025-29708Torrahclef Company Website CMS external control of a file path9.8CISA ADP v3.10.6%2025-04-16
CVE-2025-28072PHPGurukul Pre-School Enrollment System path traversal7.5CISA ADP v3.10.9%2025-04-16
CVE-2025-27936Webhook secret exposure via Timing attack in MSteams plugin5.3CNA v3.10.3%2025-04-16Fix
CVE-2025-27571Mattermost channel metadata visible in archived channels despite configuration setting4.3CNA v3.10.3%2025-04-16Fix
CVE-2025-27540Siemens TeleControl Server Basic SQL injection9.3CNA v4.01.0%2025-04-16Fix
CVE-2025-27539Siemens TeleControl Server Basic SQL injection9.3CNA v4.01.0%2025-04-16Fix
CVE-2025-27538Mattermost MFA Enforcement Bypass allows Unauthorized Removal of MFA for other Users2.2CNA v3.10.2%2025-04-16Fix
CVE-2025-27495Siemens TeleControl Server Basic SQL injection9.3CNA v4.01.0%2025-04-16Fix
CVE-2025-26153Chamilo LMS message compose feature stored cross-site scripting5.4CISA ADP v3.10.3%2025-04-16Exploit code
CVE-2025-25230Omnissa Horizon Client improper privilege management7.8CNA v3.10.2%2025-04-16
CVE-2025-24911Hitachi Vantara Pentaho Business Analytics Server XML external entity injection4.9CNA v3.10.4%2025-04-16Fix
CVE-2025-24910Hitachi Vantara Pentaho Business Analytics Server XML external entity injection4.9CNA v3.10.4%2025-04-16Fix
CVE-2025-24909Hitachi Vantara Pentaho Business Analytics Server Analyzer plugin cross-site scripting4.4CNA v3.10.3%2025-04-16Fix
CVE-2025-24908Hitachi Vantara Pentaho Data Integration and Analytics path traversal6.8CNA v3.10.5%2025-04-16Fix
CVE-2025-24907Hitachi Vantara Pentaho Data Integration and Analytics path traversal6.8CNA v3.10.4%2025-04-16Fix
CVE-2025-24839Mattermost unauthorized AI bot activation via Wrangler plugin3.1CNA v3.10.2%2025-04-16Fix
CVE-2025-23138Linux kernel watch_queue pipe accounting integer underflow5.5v3.10.2%2025-04-16Fix
CVE-2025-23137Linux kernel amd-pstate cpufreq driver null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-23136Linux kernel int340x thermal driver null pointer dereference5.5NVD v3.10.2%2025-04-16Fix
CVE-2025-23135Linux kernel RISC-V KVM AIA teardown vulnerability5.5NVD v3.10.2%2025-04-16Fix
CVE-2025-23134Linux kernel ALSA timer improper locking5.5NVD v3.10.1%2025-04-16Fix
CVE-2025-23133Linux kernel ath11k regulatory channel list out-of-bounds write8.8CNA v3.10.3%2025-04-16Fix
CVE-2025-23132Linux kernel F2FS quota sync race condition7.0CNA v3.10.3%2025-04-16Fix
CVE-2025-23131Linux kernel DLM lockspace creation null pointer dereference5.5NVD v3.10.2%2025-04-16Fix
CVE-2025-23130Linux kernel F2FS pinned file allocation denial of service5.5v3.10.2%2025-04-16Fix
CVE-2025-23129Linux kernel ath11k Wi-Fi driver vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22872Incorrect Neutralization of Input during Web Page Generation in x/net in golang.org/x/net6.5CISA ADP v3.10.5%2025-04-16Fix
CVE-2025-22128Linux kernel ath12k PCI IRQ affinity handling vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22127Linux kernel f2fs compressed file overwrite vulnerability5.5NVD v3.10.1%2025-04-16Fix
CVE-2025-22126Linux kernel md device list iteration use-after-free7.8v3.10.2%2025-04-16Fix
CVE-2025-22125Linux kernel md raid1 and raid10 I/O flag handling vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22124Linux kernel md-bitmap clustered write-intent bitmap denial of service7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22123Linux kernel f2fs curseg handling vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22122In the Linux kernel, the following vulnerability has been resolved: block: fix adding folio to bio >4GB folio is possible on some ARCHs, such as aarch64, 16GB hugepage is supported, then 'offset' of folio can't be held in 'unsigned int', cause warning in bio_add_folio_nofail() and IO failure. Fix5.5v3.10.2%2025-04-16Fix
CVE-2025-22121Linux kernel ext4 out-of-bounds read8.4CNA v3.10.2%2025-04-16Fix
CVE-2025-22120Linux kernel ext4 setattr error handling vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22119Linux kernel cfg80211 wiphy work initialization vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22118Linux kernel ice driver queue quanta configuration out-of-bounds read8.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22117In the Linux kernel, the following vulnerability has been resolved: ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() Fix using the untrusted value of proto->raw.pkt_len in function ice_vc_fdir_parse_raw() by verifying if it does not exceed the VIRTCHNL_MAX_SIZE_RAW_PACKET value8.7CNA v3.10.2%2025-04-16Fix
CVE-2025-22116Linux kernel idpf driver netdev registration improper error handling5.5v3.10.2%2025-04-16Fix
CVE-2025-22115Linux kernel btrfs block group creation race condition7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22114Linux kernel btrfs superblock validation vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22113Linux kernel ext4 superblock update on unmount vulnerability5.5NVD v3.10.2%2025-04-16Fix
CVE-2025-22112Linux kernel bnxt_en driver vnic_info array out-of-bounds read7.1v3.10.2%2025-04-16Fix
CVE-2025-22111Linux kernel bridge ioctl device handling race condition5.5NVD v3.10.2%2025-04-16Fix
CVE-2025-22110Linux kernel nfnetlink_queue vulnerability9.8CNA v3.10.4%2025-04-16Fix
CVE-2025-22109Linux kernel AX.25 socket autobind memory leak7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22108Linux kernel bnxt_en driver TX buffer descriptor vulnerability8.6CNA v3.10.4%2025-04-16Fix
CVE-2025-22107Linux kernel sja1105 DSA driver out-of-bounds read7.1NVD v3.10.2%2025-04-16Fix
CVE-2025-22106Linux kernel vmxnet3 driver reset path vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22105Linux kernel bonding driver XDP mode check vulnerability5.5NVD v3.10.2%2025-04-16Fix
CVE-2025-22104Linux kernel ibmvnic driver out-of-bounds read7.1v3.10.2%2025-04-16Fix
CVE-2025-22103Linux kernel l3mdev receive handler null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22102Linux kernel btnxpuart Bluetooth driver vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22101In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix Tx L4 checksum The hardware only supports L4 checksum offload for TCP/UDP/SCTP protocol. There was a bug to set Tx checksum flag for the other protocol that results in Tx ring hang. Fix to compute software checksum5.5v3.10.2%2025-04-16Fix
CVE-2025-22100Linux kernel Panthor GPU driver fdinfo race condition7.8CNA v3.10.1%2025-04-16Fix
CVE-2025-22099Linux kernel zynqmp_dpsub null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22098Linux kernel zynqmp_dp deadlock5.5v3.10.1%2025-04-16Fix
CVE-2025-22097Linux kernel VKMS driver use-after-free7.8CISA ADP v3.10.2%2025-04-16Fix
CVE-2025-22096Linux kernel MSM GEM dependency parsing vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22095Linux kernel PCI brcmstb regulator error path vulnerability5.5NVD v3.10.2%2025-04-16Fix
CVE-2025-22094Linux kernel powerpc VPA performance counters null pointer dereference7.3CNA v3.10.2%2025-04-16Fix
CVE-2025-22093Linux kernel AMD display DMUB hardware lock manager null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22092Linux kernel PCI SR-IOV virtual function creation null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22091Linux kernel mlx5 memory key page size calculation integer overflow5.5v3.10.2%2025-04-16Fix
CVE-2025-22090Linux kernel memory type tracking on fork vulnerability7.3CNA v3.10.2%2025-04-16Fix
CVE-2025-22089Linux kernel RDMA hardware counters sysfs null pointer dereference7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22088Linux kernel erdma connection accept handling use-after-free9.8CNA v3.10.5%2025-04-16Fix
CVE-2025-22087Linux kernel BPF interpreter dispatch table out-of-bounds read7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22086Linux kernel mlx5 completion queue polling null pointer dereference8.8CNA v3.10.3%2025-04-16Fix
CVE-2025-22085Linux kernel RDMA device rename use-after-free7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22084Linux kernel w1 UART serdev driver null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22083Linux kernel vhost-scsi endpoint setup use-after-free7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22082Linux kernel IIO backend debugfs register write vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22081Linux kernel fs/ntfs3 integer overflow7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22080Linux kernel fs/ntfs3 integer overflow8.4CNA v3.10.2%2025-04-16Fix
CVE-2025-22079Linux kernel OCFS2 extent tree out-of-bounds read7.8CNA v3.10.3%2025-04-16Fix
CVE-2025-22078Linux kernel VCHIQ keep-alive thread vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22077Linux kernel SMB client TCP timer handling deadlock9.8CNA v3.10.4%2025-04-16Fix
CVE-2025-22076Linux kernel exFAT filesystem shutdown handling vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22075In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Allocate vfinfo size for VF GUIDs when supported Commit 30aad41721e0 ("net/core: Add support for getting VF GUIDs") added support for getting VF port and node GUIDs in netlink ifinfo messages, but their size was not tak5.5v3.10.2%2025-04-16Fix
CVE-2025-22074Linux kernel ksmbd oplock break handling vulnerability8.8CNA v3.10.5%2025-04-16Fix
CVE-2025-22073Linux kernel spufs memory leak5.5v3.10.2%2025-04-16Fix
CVE-2025-22072In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "[POWERPC] spufs: Fix gang destroy leaks" we used to have a problem with gang lifetimes - creation of a gang returns opened gang directory, which normally gets removed when that gets cl7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22071Linux kernel spufs memory leak5.5v3.10.2%2025-04-16Fix
CVE-2025-22070Linux kernel 9p filesystem client null pointer dereference5.5NVD v3.10.2%2025-04-16Fix
CVE-2025-22069Linux kernel riscv function graph tracer vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22068Linux kernel ublk block driver use-after-free7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22067Linux kernel Cadence xSPI clock divider improper array index validation7.8v3.10.2%2025-04-16Fix
CVE-2025-22066Linux kernel imx-card ASoC driver null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22065Linux kernel idpf driver null pointer dereference5.5v3.10.3%2025-04-16Fix
CVE-2025-22064Linux kernel nftables hook registration vulnerability5.5v3.10.3%2025-04-16Fix
CVE-2025-22063Linux kernel CALIPSO netlabel null pointer dereference5.5v3.10.3%2025-04-16Fix
CVE-2025-22062Linux kernel SCTP UDP encapsulation port handler null pointer dereference7.8CNA v3.10.3%2025-04-16Fix
CVE-2025-22061Linux kernel airoha Ethernet HTB queue offload vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22060Linux kernel mvpp2 packet parser TCAM race condition4.7NVD v3.10.2%2025-04-16Fix
CVE-2025-22059Linux kernel udp integer overflow7.5CNA v3.10.5%2025-04-16Fix
CVE-2025-22058Linux kernel UDP socket memory accounting memory leak5.5v3.10.2%2025-04-16Fix
CVE-2025-22057Linux kernel dst_cache route caching vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22056Linux kernel nftables tunnel object out-of-bounds write7.8CNA v3.10.3%2025-04-16Fix
CVE-2025-22055Linux kernel GENEVE tunnel options parsing integer overflow7.1CNA v3.10.3%2025-04-16Fix
CVE-2025-22054Linux kernel arcnet com20020pci driver null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22053Linux kernel ibmveth driver vulnerability5.5v3.10.1%2025-04-16Fix
CVE-2025-22052Linux kernel GPIB NI USB driver null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22051Linux kernel GPIB Agilent USB driver null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22050Linux kernel usbnet driver null pointer dereference4.7v3.10.2%2025-04-16Fix
CVE-2025-22049Linux kernel LoongArch DMA buffer allocation vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22048Linux kernel BPF kernel panic7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22047Linux kernel AMD microcode loader vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22046Linux kernel uretprobe syscall trampoline check vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22045Linux kernel x86 TLB flush for page table zapping vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22044Linux kernel ACPI NFIT control interface incorrect type conversion7.1CNA v3.10.2%2025-04-16Fix
CVE-2025-22043Linux kernel ksmbd durable handle context parsing vulnerability8.1CNA v3.10.5%2025-04-16Fix
CVE-2025-22042Linux kernel ksmbd create lease context parsing vulnerability8.1CNA v3.10.5%2025-04-16Fix
CVE-2025-22041Linux kernel ksmbd session deregistration use-after-free8.8CNA v3.10.7%2025-04-16Fix
CVE-2025-22040Linux kernel ksmbd multichannel session handling use-after-free8.8CNA v3.10.7%2025-04-16Fix
CVE-2025-22039Linux kernel ksmbd DACL bounds check integer overflow8.8CNA v3.10.8%2025-04-16Fix
CVE-2025-22038Linux kernel ksmbd out-of-bounds read8.3CNA v3.10.6%2025-04-16Fix
CVE-2025-22037Linux kernel ksmbd SMB2 session setup null pointer dereference7.5CNA v3.169.5%2025-04-16Fix
CVE-2025-22036Linux kernel exfat block handling use-after-free7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22035Linux kernel ftrace tracer switching use-after-free7.8CNA v3.10.3%2025-04-16Fix
CVE-2025-22034Linux kernel get_user_pages hugetlb handling vulnerability7.8CNA v3.10.3%2025-04-16Fix
CVE-2025-22033Linux kernel arm64 compat alignment fault handler null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22032Linux kernel mt76 mt7921 Wi-Fi driver null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22031Linux kernel PCIe bandwidth controller driver null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-22030Linux kernel zswap compression deadlock5.5v3.10.2%2025-04-16Fix
CVE-2025-22028Linux kernel vimc virtual media controller driver vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2025-22027Linux kernel streamzap IR receiver driver race condition4.7v3.10.1%2025-04-16Fix
CVE-2025-22026Linux kernel nfsd unchecked return value5.5v3.10.2%2025-04-16Fix
CVE-2025-22025Linux kernel nfsd memory leak7.5CNA v3.10.6%2025-04-16Fix
CVE-2025-22024Linux kernel NFS server listener transports use-after-free5.5v3.10.2%2025-04-16Fix
CVE-2025-22023Linux kernel xhci USB host controller driver use-after-free7.8v3.10.2%2025-04-16Fix
CVE-2025-22022Linux kernel xhci USB host controller driver out-of-bounds write7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22021Linux kernel netfilter socket lookup vulnerability10.0CNA v3.10.5%2025-04-16Fix
CVE-2025-22020Linux kernel rtsx_usb_ms use-after-free7.8CNA v3.10.2%2025-04-16Fix
CVE-2025-22019Linux kernel bcachefs subvolume destroy ioctl vulnerability7.3CNA v3.10.2%2025-04-16Fix
CVE-2025-22018Linux kernel ATM MPOA cache null pointer dereference5.5v3.10.2%2025-04-16Fix
CVE-2025-20236Cisco Webex App Client-Side remote code execution8.8CNA v3.11.0%2025-04-16Fix
CVE-2025-20178Cisco Secure Network Analytics privilege escalation6.0CNA v3.10.4%2025-04-16Fix
CVE-2025-20150Cisco Nexus Dashboard LDAP authentication vulnerability5.3CNA v3.10.5%2025-04-16Fix
CVE-2025-3739Drupal 8 Google Optimize Hide Page Critical Unsupported SA-CONTRIB-2025-0405.9CISA ADP v3.10.3%2025-04-16Fix
CVE-2025-3738Google Optimize Critical Unsupported SA-CONTRIB-2025-0395.9CISA ADP v3.10.3%2025-04-16
CVE-2025-3737Google Maps: Store Locator Critical Unsupported SA-CONTRIB-2025-0385.9CISA ADP v3.10.3%2025-04-16
CVE-2025-3736Simple GTM Critical Unsupported SA-CONTRIB-2025-0375.9CISA ADP v3.10.3%2025-04-16
CVE-2025-3735Panelizer (obsolete) Critical Unsupported SA-CONTRIB-2025-0365.9CISA ADP v3.10.3%2025-04-16
CVE-2025-3734Stage File Proxy Moderately critical denial of service SA-CONTRIB-2025-0355.9CISA ADP v3.10.4%2025-04-16Fix
CVE-2025-3733baguetteBox.js Moderately critical cross-site scripting SA-CONTRIB-2025-0346.5CISA ADP v3.10.2%2025-04-16Fix
CVE-2025-3730PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service5.5v3.10.3%2025-04-16Fix
CVE-2025-3729SourceCodester Web-based Pharmacy Product Management System backup.php command injection9.8v3.13.3%2025-04-16
CVE-2025-3728SourceCodester Simple Hotel Booking System login buffer overflow7.8v3.10.3%2025-04-16
CVE-2025-3727PCMan FTP Server STATUS command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3726PCMan FTP Server CD command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3725PCMan FTP Server MIC command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3724PCMan FTP Server DIR command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3723PCMan FTP Server MDTM command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3698TECNO com.transsion.carlcare exposed dangerous method7.5CISA ADP v3.10.4%2025-04-16
CVE-2025-3697SourceCodester Web-based Pharmacy Product Management System edit-product.php SQL injection8.8v3.10.5%2025-04-16
CVE-2025-3696SourceCodester Web-based Pharmacy Product Management System search_stock. PHP SQL injection8.8v3.10.5%2025-04-16
CVE-2025-3694SourceCodester Web-based Pharmacy Product Management System Login SQL injection9.8v3.10.6%2025-04-16
CVE-2025-3693Tenda W12 httpd cgiWifiRadioSet stack-based overflow9.8v3.17.4%2025-04-16Emerging Threats
CVE-2025-3692SourceCodester Online Eyewear Shop Master.php cross-site scripting5.4v3.10.4%2025-04-16
CVE-2025-3691mirweiye Seven Bears Library CMS Add Link server-side request forgery5.3v3.10.6%2025-04-16
CVE-2025-3690PHPGurukul Men Salon Management System edit-services.php SQL injection9.8v3.10.8%2025-04-16
CVE-2025-3689PHPGurukul Men Salon Management System edit-customer-detailed.php SQL injection9.8v3.10.7%2025-04-16
CVE-2025-3688mirweiye Seven Bears Library CMS Background Management page cross-site scripting4.8CNA v4.00.3%2025-04-16
CVE-2025-3687misstt123 oasys Sticky Notes cross-site request forgery5.3CNA v4.00.3%2025-04-16
CVE-2025-3686misstt123 oasys show image path traversal5.3CNA v4.00.6%2025-04-16
CVE-2025-3685code-projects Patient Record Management System edit_fpatient.php SQL injection8.8v3.10.5%2025-04-16
CVE-2025-3684Xianqi Kindergarten Management System Child Management stu_list.php SQL injection9.8v3.10.5%2025-04-16
CVE-2025-3683PCMan FTP Server SIZE command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3682PCMan FTP Server PASV command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3681PCMan FTP Server MODE command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3680PCMan FTP Server LANG command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3679PCMan FTP Server host command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3678PCMan FTP Server HELP command buffer overflow9.8v3.10.8%2025-04-16
CVE-2025-3677lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization4.8CNA v4.00.2%2025-04-16
CVE-2025-3676xxyopen Novel-Plus books SQL injection9.8v3.10.5%2025-04-16
CVE-2025-3675TOTOLINK A3700R cstecgi.cgi setL2tpServerCfg access control5.3v3.10.6%2025-04-16
CVE-2025-3674TOTOLINK A3700R cstecgi.cgi setUrlFilterRules access control6.9CNA v4.00.6%2025-04-16
CVE-2025-3668TOTOLINK A3700R cstecgi.cgi setScheduleCfg access control6.9CNA v4.01.4%2025-04-16Emerging Threats
CVE-2025-3667TOTOLINK A3700R cstecgi.cgi setUPnPCfg access control6.9CNA v4.00.6%2025-04-16Emerging Threats
CVE-2025-3666TOTOLINK A3700R cstecgi.cgi setDdnsCfg access control6.9CNA v4.00.6%2025-04-16Emerging Threats
CVE-2025-3665TOTOLINK A3700R cstecgi.cgi setSmartQosCfg access control6.9CNA v4.00.6%2025-04-16Emerging Threats
CVE-2025-3664TOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg access control6.9CNA v4.00.6%2025-04-16Emerging Threats
CVE-2025-3663TOTOLINK A3700R Password cstecgi.cgi setWiFiEasyGuestCfg access control8.2v3.111.3%2025-04-16Emerging Threats
CVE-2025-3620Google Chrome USB use-after-free8.8CISA ADP v3.10.3%2025-04-16Fix
CVE-2025-3619Google Chrome Codecs heap-based buffer overflow8.8CISA ADP v3.10.5%2025-04-16Fix
CVE-2025-3495COMMGR Insufficient Randomization authentication bypass9.8CNA v3.10.7%2025-04-16Fix
CVE-2025-3247Contact Form 7 WordPress plugin order Replay vulnerability5.3CNA v3.10.2%2025-04-16Fix
CVE-2025-3104WP Staging Pro WordPress plugin unauthenticated information exposure5.3CNA v3.10.3%2025-04-16Fix
CVE-2025-3077Betheme WordPress theme authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-04-16Fix
CVE-2025-2564Mattermost Unauthorized View Access to Archived Channel Member Info4.3CNA v3.10.3%2025-04-16Fix
CVE-2025-2314User Profile Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-16Fix
CVE-2025-2291PgBouncer default auth_query does not take Postgres password expiry into account8.1CNA v3.10.4%2025-04-16Fix
CVE-2025-2073Linux kernel netfilter/ipset out-of-bounds read8.8CISA ADP v3.10.2%2025-04-16Fix
CVE-2025-1983Stored cross-site scripting in Ready_5.1CNA v4.00.7%2025-04-16
CVE-2025-1982Local file inclusion in Ready_7.1CNA v4.00.6%2025-04-16
CVE-2025-1981SQL injection in Ready_9.4CNA v4.00.5%2025-04-16
CVE-2025-1980Remote code execution via unrestricted file upload in Ready_7.1CNA v4.01.1%2025-04-16
CVE-2025-1704Google ChromeOS use-after-free6.5CISA ADP v3.10.2%2025-04-16Fix
CVE-2025-1568Google ChromeOS Gerrit chromiumos project configuration improper access control8.8CISA ADP v3.10.4%2025-04-16Fix
CVE-2025-1566Google ChromeOS native system VPN information disclosure7.5CISA ADP v3.10.2%2025-04-16Fix
CVE-2025-0758Hitachi Vantara Pentaho Business Analytics Server Karaf JMX beans incorrect permission assignment6.1CNA v3.10.2%2025-04-16Fix
CVE-2025-0757Hitachi Vantara Pentaho Business Analytics Server Analyzer plugin cross-site scripting4.4CNA v3.10.3%2025-04-16Fix
CVE-2025-0756Hitachi Vantara Pentaho Data Integration and Analytics improper control of resource identifiers9.1CNA v3.10.9%2025-04-16Fix
CVE-2025-0101WAGO CC100 0751-9x01 integer overflow6.5CNA v3.10.4%2025-04-16Fix
CVE-2025-33028WinZip archive extraction security feature bypass6.1CNA v3.10.5%2025-04-15
CVE-2025-33027Bandisoft Bandizip archive extraction security feature bypass7.8v3.10.3%2025-04-15
CVE-2025-33026PeaZip archive extraction security feature bypass7.8v3.10.3%2025-04-15
CVE-2025-32997http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed5.3v3.10.4%2025-04-15Fix
CVE-2025-32996http-proxy-middleware can call writeBody twice because else if is not used5.3v3.10.4%2025-04-15Fix
CVE-2025-32993Vision Helpdesk SQL injection6.5CNA v3.10.3%2025-04-15
CVE-2025-32987Arctera eDiscovery Platform EVSearcher information disclosure6.0CNA v3.10.2%2025-04-15Fix
CVE-2025-32949PeerTube user import authenticated resource exhaustion6.5CNA v3.10.6%2025-04-15Fix
CVE-2025-32948PeerTube ActivityPub Playlist Creation Blind SSRF and DoS7.5CNA v3.10.6%2025-04-15Fix
CVE-2025-32947PeerTube ActivityPub Crawl infinite loop DoS7.5CNA v3.10.7%2025-04-15Fix
CVE-2025-32946PeerTube arbitrary Playlist Creation via ActivityPub protocol5.3CNA v3.10.4%2025-04-15Fix
CVE-2025-32945PeerTube arbitrary Playlist Creation via REST API4.3CNA v3.10.3%2025-04-15Fix
CVE-2025-32944PeerTube User Import Authenticated Persistent denial of service6.5CNA v3.10.6%2025-04-15Fix
CVE-2025-32943PeerTube HLS Video files path traversal4.3NVD v3.10.5%2025-04-15Fix
CVE-2025-32929Barcode Generator for WooCommerce WordPress plugin arbitrary content deletion vulnerability7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-32923Tourmaster WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-15Fix
CVE-2025-32911libsoup content-disposition header parsing double free9.0CNA v3.10.9%2025-04-15Fix
CVE-2025-32784conda-forge-webservices has an Unauthorized Artifact Modification race condition7.5CNA v4.00.3%2025-04-15Fix
CVE-2025-32782ash_authentication has email link auto-click account confirmation vulnerability5.3CNA v3.10.3%2025-04-15Fix
CVE-2025-32780BleachBit for Windows has DLL Untrusted Path vulnerability7.3CNA v3.10.2%2025-04-15Fix
CVE-2025-32779Labsai/eddi vulnerable to path traversal (Zip Slip) in ZIP Import function6.5CNA v3.11.2%2025-04-15Fix
CVE-2025-32778Web-Check allows command injection via Unvalidated URL in Screenshot API9.3CNA v4.019.6%2025-04-15Reported exploitedNucleiMetasploitExploit codeFix
CVE-2025-32776OpenRazer vulnerable to out-of-bounds read5.5CNA v3.10.2%2025-04-15Fix
CVE-2025-32445Argo Events EventSource and Sensor custom resources execution with unnecessary privileges10.0CNA v3.10.8%2025-04-15Fix
CVE-2025-32439pleezer allows resource exhaustion through uncollected hook script processes6.5CNA v3.10.4%2025-04-15Fix
CVE-2025-32438NixOS nixpkgs local privilege escalation in make-initrd-ng8.8CNA v3.10.2%2025-04-15
CVE-2025-32435Hydra no restricted eval after nix-eval-jobs migration2.6CNA v3.10.3%2025-04-15Fix
CVE-2025-32428Jupyter Remote Desktop Proxy TigerVNC server exposure resource exposure9.0CNA v4.00.9%2025-04-15Fix
CVE-2025-32388sveltejs kit SvelteKit allows XSS via tracked search_params5.4CNA v3.10.3%2025-04-15Fix
CVE-2025-32103CrushFTP path traversal5.0CNA v3.118.1%2025-04-15Emerging Threats
CVE-2025-32102CrushFTP server-side request forgery5.0CNA v3.19.4%2025-04-15Emerging Threats
CVE-2025-32021Weblate component creation URL parameters information disclosure2.2CNA v3.10.4%2025-04-15Fix
CVE-2025-32012Jellyfin vulnerable to denial of service (DoS) via IP spoofing4.6CNA v4.00.8%2025-04-15Fix
CVE-2025-31950Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-31949Growatt Cloud portal authorization bypass through user-controlled key5.3v3.10.3%2025-04-15
CVE-2025-31945Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.6%2025-04-15
CVE-2025-31941Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-31933Growatt Cloud Applications authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-31654Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-31499Jellyfin vulnerable to argument injection in FFmpeg7.6CNA v4.00.8%2025-04-15Fix
CVE-2025-31497TEIGarage XML external entity (XXE) injection in Document Conversion service7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-31494AutoGPT allows cross-user sharing of node execution results through WebSockets API3.5CNA v3.10.4%2025-04-15Fix
CVE-2025-31491AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect8.6CNA v3.10.5%2025-04-15Fix
CVE-2025-31360Growatt Cloud portal authorization bypass through user-controlled key7.5v3.10.5%2025-04-15
CVE-2025-31357Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-31147Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-31011SimplyRETS Real Estate IDX WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-15Fix
CVE-2025-30985GNUCommerce WordPress plugin PHP object injection9.8CNA v3.10.5%2025-04-15
CVE-2025-30984SEO Tools WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-15
CVE-2025-30982MyBookProgress by Stormhill Media WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-15
CVE-2025-30970Easy Contact WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-15
CVE-2025-30967WPJobBoard WordPress plugin CSRF to remote code execution (RCE)9.6CNA v3.10.2%2025-04-15Exploit codeFix
CVE-2025-30966WPJobBoard WordPress plugin path traversal5.4CNA v3.10.3%2025-04-15Fix
CVE-2025-30965WPJobBoard WordPress plugin Multiple cross-site request forgery (CSRF) vulnerabilities4.3CNA v3.10.2%2025-04-15Fix
CVE-2025-30964Photography WordPress theme server side request forgery (SSRF)5.4CNA v3.10.2%2025-04-15Fix
CVE-2025-30962FS Poster WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-15Fix
CVE-2025-30740Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data access6.5CNA v3.10.4%2025-04-15Fix
CVE-2025-30737Oracle Smart View for Office Core Smart view component unauthorized data access5.7CNA v3.10.3%2025-04-15Fix
CVE-2025-30736Oracle Database Server improper access control7.4CNA v3.10.4%2025-04-15Fix
CVE-2025-30735Oracle PeopleSoft Enterprise CC Common Application Objects unauthorized data access8.1CNA v3.10.4%2025-04-15Fix
CVE-2025-30733Oracle Database Server improper authentication6.5CNA v3.10.4%2025-04-15Fix
CVE-2025-30732Oracle E-Business Suite Application Object Library Core component unauthorized data modification6.1CNA v3.10.3%2025-04-15Fix
CVE-2025-30731Oracle E-Business Suite Applications Technology Stack unauthorized data modification3.6CNA v3.10.2%2025-04-15Fix
CVE-2025-30730Oracle E-Business Suite Application Object Library Core component denial of service7.5CNA v3.10.5%2025-04-15Fix
CVE-2025-30729Oracle Communications Order and Service Management Security component unauthorized data modification5.5CNA v3.10.2%2025-04-15Fix
CVE-2025-30728Oracle E-Business Suite Configurator Core component unauthorized data access7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-30727Oracle E-Business Suite Scripting iSurvey module component takeover9.8CNA v3.10.5%2025-04-15Fix
CVE-2025-30726Oracle E-Business Suite Application Object Library Core component information disclosure5.3CNA v3.10.3%2025-04-15Fix
CVE-2025-30725Oracle VM VirtualBox Core component unauthorized data modification6.7CNA v3.10.2%2025-04-15Fix
CVE-2025-30724Oracle BI Publisher XML services component unauthorized data access7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-30723Oracle BI Publisher XML services component unauthorized data modification5.4CNA v3.10.3%2025-04-15Fix
CVE-2025-30722Oracle MySQL Client mysqldump component unauthorized data access5.3CNA v3.10.5%2025-04-15Fix
CVE-2025-30721Oracle MySQL Server UDF component denial of service4.0CNA v3.10.2%2025-04-15Fix
CVE-2025-30720Oracle E-Business Suite Configurator Orders component unauthorized data modification6.1CNA v3.10.3%2025-04-15Fix
CVE-2025-30719Oracle VM VirtualBox Core component denial of service6.1CNA v3.10.3%2025-04-15Fix
CVE-2025-30718Oracle E-Business Suite Applications Framework unauthorized data modification5.4CNA v3.10.3%2025-04-15Fix
CVE-2025-30717Oracle E-Business Suite Teleservice Service Diagnostics scripts component unauthorized data access6.5CNA v3.10.5%2025-04-15Fix
CVE-2025-30716Oracle E-Business Suite Common Applications unauthorized data access7.5CNA v3.10.7%2025-04-15Fix
CVE-2025-30715Oracle MySQL Server components services component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-30714Oracle MySQL Connectors Connector/Python component unauthorized data access4.8CNA v3.10.4%2025-04-15Fix
CVE-2025-30713Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager unauthorized data modification5.4CNA v3.10.4%2025-04-15Fix
CVE-2025-30712Oracle VM VirtualBox Core component unauthorized data access8.1CNA v3.10.6%2025-04-15Exploit codeFix
CVE-2025-30711Oracle E-Business Suite Applications Framework unauthorized data modification5.4CNA v3.10.4%2025-04-15Fix
CVE-2025-30710Oracle MySQL Cluster NDBCluster plugin component denial of service4.9CNA v3.10.6%2025-04-15Fix
CVE-2025-30709Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification6.1CNA v3.10.4%2025-04-15Fix
CVE-2025-30708Oracle E-Business Suite User Management Search and Register Users component unauthorized data access7.5CNA v3.10.7%2025-04-15Fix
CVE-2025-30707Oracle E-Business Suite iStore User Management component unauthorized data access7.5CNA v3.10.7%2025-04-15Fix
CVE-2025-30706Oracle MySQL Connectors Connector/J component takeover7.5CNA v3.10.6%2025-04-15Fix
CVE-2025-30705Oracle MySQL Server PS component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-30704Oracle MySQL Server components services component denial of service4.4CNA v3.10.8%2025-04-15Fix
CVE-2025-30703Oracle MySQL Server InnoDB component unauthorized data modification2.7CNA v3.10.5%2025-04-15Fix
CVE-2025-30702Oracle Database Server information disclosure5.3CNA v3.10.5%2025-04-15Fix
CVE-2025-30701Oracle Database Server incorrect default permissions7.3CNA v3.10.5%2025-04-15Fix
CVE-2025-30700Oracle Solaris Pluggable authentication module component information disclosure3.5CNA v3.10.5%2025-04-15Fix
CVE-2025-30699Oracle MySQL Server Stored Procedure component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-30698Oracle Java SE improper access control5.6CNA v3.10.6%2025-04-15Fix
CVE-2025-30697Oracle PeopleSoft Enterprise PeopleTools Panel Processor component unauthorized data modification5.4CNA v3.10.4%2025-04-15Fix
CVE-2025-30696Oracle MySQL Server PS component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-30695Oracle MySQL Server InnoDB component unauthorized data modification5.5CNA v3.10.7%2025-04-15Fix
CVE-2025-30694Oracle Database Server improper access control5.4CNA v3.10.4%2025-04-15Fix
CVE-2025-30693Oracle MySQL Server InnoDB component unauthorized data modification5.5CNA v3.11.0%2025-04-15Fix
CVE-2025-30692Oracle E-Business Suite iSupplier Portal Attachments component unauthorized data access6.5CNA v3.10.6%2025-04-15Fix
CVE-2025-30691Oracle Java SE improper access control4.8CNA v3.10.6%2025-04-15Fix
CVE-2025-30690Oracle Solaris Filesystem component takeover7.2CNA v3.10.2%2025-04-15Fix
CVE-2025-30689Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-30688Oracle MySQL Server Optimizer component denial of service6.5CNA v3.10.8%2025-04-15Fix
CVE-2025-30687Oracle MySQL Server Optimizer component denial of service6.5CNA v3.10.8%2025-04-15Fix
CVE-2025-30686Oracle Hospitality Simphony EMC component unauthorized data access7.6CNA v3.10.6%2025-04-15Fix
CVE-2025-30685Oracle MySQL Server Replication component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-30684Oracle MySQL Server Replication component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-30683Oracle MySQL Server Replication component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-30682Oracle MySQL Server Optimizer component denial of service6.5CNA v3.10.8%2025-04-15Fix
CVE-2025-30681Oracle MySQL Server Replication component denial of service2.7CNA v3.10.8%2025-04-15Fix
CVE-2025-30514Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.5%2025-04-15
CVE-2025-30512Growatt Cloud portal external control of system or configuration setting6.9CNA v4.00.6%2025-04-15
CVE-2025-30511Growatt Cloud Applications cross-site scripting5.4NVD v3.10.4%2025-04-15
CVE-2025-30510Growatt Cloud portal Insufficient Type Distinction9.3CNA v4.00.3%2025-04-15
CVE-2025-30257Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-30254Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.5%2025-04-15
CVE-2025-30206Dpanel's hard-coded JWT secret leads to remote code execution9.8CNA v3.10.9%2025-04-15Fix
CVE-2025-29984Dell Trusted Device Client incorrect default permissions6.7CNA v3.10.1%2025-04-15Fix
CVE-2025-29983Dell Trusted Device Client link following6.7CNA v3.10.2%2025-04-15Fix
CVE-2025-29817Microsoft Power Automate Desktop information disclosure5.7CNA v3.10.9%2025-04-15Fix
CVE-2025-29705Tanghc Code-gen improper access control4.3CISA ADP v3.10.3%2025-04-15Exploit code
CVE-2025-29471Nagios Log Server cross-site scripting8.3CISA ADP v3.17.2%2025-04-15Exploit codeFix
CVE-2025-29281PerfreeBlog code injection8.8CISA ADP v3.10.8%2025-04-15
CVE-2025-29280PerfreeBlog stored cross-site scripting4.8CISA ADP v3.10.3%2025-04-15
CVE-2025-29213JEEWMS path traversal5.5CISA ADP v3.10.4%2025-04-15
CVE-2025-28399Exrick xmall improper privilege management9.8CISA ADP v3.10.6%2025-04-15
CVE-2025-28198Hitstiresoftware Hitout Car Sale SQL injection5.9CISA ADP v3.10.3%2025-04-15
CVE-2025-28145Edimax BR-6478AC V3 command injection6.5CISA ADP v3.19.8%2025-04-15Emerging Threats
CVE-2025-28144Edimax BR-6478AC V3 stack-based buffer overflow6.5CISA ADP v3.15.1%2025-04-15Emerging Threats
CVE-2025-28143Edimax BR-6478AC V3 command injection6.5CISA ADP v3.19.5%2025-04-15
CVE-2025-28142Edimax BR-6478AC V3 command injection6.5CISA ADP v3.19.8%2025-04-15Emerging Threats
CVE-2025-28137TOTOLINK A810R OS command injection9.8CISA ADP v3.134.1%2025-04-15Emerging Threats
CVE-2025-28136TOTOLINK A800R stack-based buffer overflow6.5CISA ADP v3.10.3%2025-04-15
CVE-2025-28100Geeeeeeeek Dingfanzu SQL injection9.8CISA ADP v3.10.6%2025-04-15
CVE-2025-27980Oldmoon Cashbook arbitrary file read6.5CISA ADP v3.10.3%2025-04-15
CVE-2025-27939Growatt Cloud portal authorization bypass through user-controlled key7.5v3.10.8%2025-04-15
CVE-2025-27938Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.5%2025-04-15
CVE-2025-27929Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-27927Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-27892Shopware vulnerable to blind SQL-injection in DAL aggregations6.8CISA ADP v3.112.9%2025-04-15NucleiFix
CVE-2025-27791Collabora Online vulnerable to arbitrary file write8.3CNA v4.00.5%2025-04-15Fix
CVE-2025-27719Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.6%2025-04-15
CVE-2025-27575Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-27568Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.5%2025-04-15
CVE-2025-27565Growatt Cloud portal authorization bypass through user-controlled key5.3v3.10.3%2025-04-15
CVE-2025-27561Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.3%2025-04-15
CVE-2025-27011Booking and Rental Manager WordPress plugin local file inclusion7.5CNA v3.10.6%2025-04-15Fix
CVE-2025-27008WordPress Unlimited Timeline plugin broken access control7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-26998SKT Blocks Gutenberg based Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-04-15Fix
CVE-2025-26996Sign-up Sheets WordPress plugin shortcode injection6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-26992Landing Page Cat WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-15Fix
CVE-2025-26990Royal Elementor Addons WordPress plugin server side request forgery (SSRF)4.9v3.10.2%2025-04-15Fix
CVE-2025-26982DSGVO Youtube WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-15Fix
CVE-2025-26959WordPress Administrator Z privilege escalation8.8CNA v3.10.4%2025-04-15Fix
CVE-2025-26958JetBlog WordPress plugin broken access control7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-26955Industrial Lite WordPress theme broken access control4.3CNA v3.10.3%2025-04-15
CVE-2025-26954ZooEffect WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-15
CVE-2025-26953JetMenu WordPress plugin broken access control7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-26951C9 Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15
CVE-2025-26950Nepali Date Converter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-26944JetPopup WordPress plugin broken access control7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-26942JetTricks WordPress plugin broken access control7.5CNA v3.10.4%2025-04-15Fix
CVE-2025-26934Glossy Blog WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15
CVE-2025-26930Home Services WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15
CVE-2025-26927AI Hub WordPress theme arbitrary file upload10.0CNA v3.10.5%2025-04-15Fix
CVE-2025-26919Tainá WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-26908Kargo Entegratör WordPress plugin SQL injection7.6CNA v3.10.4%2025-04-15Fix
CVE-2025-26906WP Delete User Accounts WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-26903InPost Gallery WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-15Fix
CVE-2025-26894Coming Soon, Maintenance Mode WordPress plugin local file inclusion7.5CNA v3.10.6%2025-04-15
CVE-2025-26889hockeydata LOS WordPress plugin local file inclusion7.5CNA v3.10.6%2025-04-15
CVE-2025-26880SKT Skill Bar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-26870JetEngine WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-26857Growatt Cloud portal authorization bypass through user-controlled key5.3v3.10.3%2025-04-15
CVE-2025-26749Additional Custom Product Tabs for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-26748Arkhe WordPress theme CSRF to local file inclusion8.1CNA v3.10.3%2025-04-15Fix
CVE-2025-26746Advanced Custom Fields: Link Picker Field WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-15
CVE-2025-26745RS Elements Elementor Addon WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-15
CVE-2025-26744JetBlog WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-15Fix
CVE-2025-26743Advance WP Query Search Filter WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-15
CVE-2025-26741WordPress Email Notifications for Updates privilege escalation8.8CNA v3.10.4%2025-04-15Fix
CVE-2025-26740SpaBiz WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15
CVE-2025-26730Macro Calculator with Admin Email Optin and Data information disclosure7.5CNA v3.10.5%2025-04-15
CVE-2025-25458Tenda AC10 buffer overflow4.6CISA ADP v3.10.3%2025-04-15
CVE-2025-25456Tenda AC10 buffer overflow9.8CISA ADP v3.10.6%2025-04-15
CVE-2025-25453Tenda AC10 buffer overflow4.6CISA ADP v3.10.3%2025-04-15
CVE-2025-25276Growatt Cloud portal authorization bypass through user-controlled key6.5v3.10.3%2025-04-15
CVE-2025-24949Joturl improper authentication6.5CISA ADP v3.10.3%2025-04-15
CVE-2025-24948Joturl sensitive query strings6.5CISA ADP v3.10.3%2025-04-15
CVE-2025-24850Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.4%2025-04-15
CVE-2025-24797Meshtastic incorrectly hands malformed packets leads to controlled buffer overflow9.4CNA v3.10.9%2025-04-15Exploit codeFix
CVE-2025-24487Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.5%2025-04-15
CVE-2025-24358Gorilla/csrf CSRF vulnerability due to broken Referer validation5.4CNA v4.00.4%2025-04-15Fix
CVE-2025-24315Growatt Cloud portal authorization bypass through user-controlled key6.9CNA v4.00.6%2025-04-15
CVE-2025-24297Growatt Cloud portal cross-site scripting9.3CNA v4.00.5%2025-04-15
CVE-2025-22911Edimax RE11S stack-based buffer overflow5.6CISA ADP v3.10.4%2025-04-15
CVE-2025-22903TOTOLINK N600R stack-based buffer overflow4.6CISA ADP v3.10.2%2025-04-15
CVE-2025-22900TOTOLINK N600R stack-based buffer overflow9.8CISA ADP v3.10.6%2025-04-15
CVE-2025-22269Real Testimonials WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-22268Uncanny Toolkit for LearnDash WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-15Fix
CVE-2025-22263Global Gallery WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-15
CVE-2025-21588Oracle MySQL Server DML component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-21587Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access7.4CNA v3.10.8%2025-04-15Fix
CVE-2025-21586Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification5.4CNA v3.10.4%2025-04-15Fix
CVE-2025-21585Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-21584Oracle MySQL Server DDL component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-21583Oracle MySQL Server DDL component denial of service4.9CNA v3.10.8%2025-04-15Fix
CVE-2025-21582Oracle E-Business Suite CRM Technical Foundation unauthorized data modification6.1CNA v3.10.4%2025-04-15Fix
CVE-2025-21581Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2025-04-15Fix
CVE-2025-21580Oracle MySQL Server DML component denial of service4.9CNA v3.10.7%2025-04-15Fix
CVE-2025-21579Oracle MySQL Server options component denial of service4.9CNA v3.10.7%2025-04-15Fix
CVE-2025-21578Oracle Secure Backup incorrect permission assignment6.7CNA v3.10.2%2025-04-15Fix
CVE-2025-21577Oracle MySQL Server InnoDB component denial of service6.5CNA v3.10.8%2025-04-15Fix
CVE-2025-21576Oracle Commerce Platform Dynamo Personalization Server component unauthorized data modification5.4CNA v3.10.2%2025-04-15Fix
CVE-2025-21575Oracle MySQL Server parser component denial of service6.5CNA v3.10.9%2025-04-15Fix
CVE-2025-21574Oracle MySQL Server parser component denial of service6.5CNA v3.11.1%2025-04-15Fix
CVE-2025-21573Oracle Financial Services Revenue Management and Billing Chatbot component unauthorized data access6.0CNA v3.10.4%2025-04-15Fix
CVE-2025-3622Xorbits Inference model.py load deserialization5.1CNA v4.00.4%2025-04-15
CVE-2025-3618Rockwell Automation ThinManager local privilege escalation8.5CNA v4.01.8%2025-04-15Fix
CVE-2025-3617Local privilege escalation in ThinManager®8.5CNA v4.00.3%2025-04-15Fix
CVE-2025-3613Demtec Graphytics visualization cross-site scripting5.1CNA v4.00.3%2025-04-15
CVE-2025-3612Demtec Graphytics HTTP GET parameter visualization cross-site scripting5.3CNA v4.00.4%2025-04-15
CVE-2025-3608Mozilla Firefox race condition in nsHttpTransaction could lead to memory corruption6.5CISA ADP v3.10.3%2025-04-15Fix
CVE-2025-3579Code injection vulnerability in AiDex9.3CNA v4.00.7%2025-04-15Fix
CVE-2025-3578Adversarial Input Handling vulnerability in AiDex9.3CNA v4.00.5%2025-04-15Fix
CVE-2025-3576Kerberos RC4-HMAC-MD5 checksum vulnerability5.9CNA v3.10.3%2025-04-15Fix
CVE-2025-3575Insecure direct object reference en Deporsite de T-INNOVA8.7CNA v4.00.5%2025-04-15
CVE-2025-3574Insecure direct object reference on Deporsite by T-INNOVA8.7CNA v4.00.5%2025-04-15
CVE-2025-3573jquery-validation vulnerable to cross-site scripting5.3CNA v4.00.4%2025-04-15Fix
CVE-2025-3523Mozilla Thunderbird User Interface (UI) Misrepresentation of attachment URL6.4CISA ADP v3.10.3%2025-04-15Fix
CVE-2025-3522Mozilla Thunderbird leak of hashed window credentials via crafted attachment URL6.3CISA ADP v3.10.3%2025-04-15Fix
CVE-2025-3470TS Poll Survey, Versus Poll, Image Poll, Video Poll WordPress plugin SQL injection4.9CNA v3.10.4%2025-04-15Fix
CVE-2025-2830Mozilla Thunderbird information disclosure of /tmp directory listing6.3CISA ADP v3.10.4%2025-04-15Fix
CVE-2025-2567Lantronix XPort missing authentication for critical function9.3CNA v4.00.5%2025-04-15Fix
CVE-2025-2497Autodesk Revit DWG File Parsing Stack-Based Buffer vulnerability7.8CNA v3.10.3%2025-04-15Fix
CVE-2025-2225Responsive Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2025-04-15Fix
CVE-2025-2083Logo Carousel Gutenberg Block WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-15Fix
CVE-2025-1688Milestone Systems XProtect VMS system configuration password reset5.5CNA v4.00.2%2025-04-15
CVE-2025-1656Autodesk Revit PDF File Parsing heap-based overflow7.8CNA v3.10.3%2025-04-15Fix
CVE-2025-1292Google ChromeOS TPM2 Reference library out-of-bounds write6.7CISA ADP v3.10.2%2025-04-15
CVE-2025-1277Autodesk Revit PDF File Parsing memory corruption7.8CNA v3.10.3%2025-04-15Fix
CVE-2025-1276DWG File Parsing out-of-bounds write7.8CNA v3.10.3%2025-04-15Fix
CVE-2025-1275Autodesk Revit JPG File Parsing heap-based overflow7.8CNA v3.10.4%2025-04-15Fix
CVE-2025-1274Autodesk Revit RCS File Parsing out-of-bounds write7.8CNA v3.10.2%2025-04-15Fix
CVE-2025-1273Autodesk Revit PDF File Parsing heap-based overflow7.8CNA v3.10.2%2025-04-15Fix
CVE-2025-1122Google ChromeOS TPM2 Reference library out-of-bounds write6.7CISA ADP v3.10.2%2025-04-15Exploit codeFix
CVE-2025-32931DevDojo Voyager argument injection9.1CNA v3.10.6%2025-04-14
CVE-2025-32914Red Hat Enterprise Linux 10 libsoup: Oob read on libsoup7.4CNA v3.10.8%2025-04-14Fix
CVE-2025-32913libsoup content-disposition header parsing null pointer dereference7.5CNA v3.10.8%2025-04-14Fix
CVE-2025-32912libsoup digest authentication null pointer dereference6.5CNA v3.10.4%2025-04-14Fix
CVE-2025-32910Red Hat Enterprise Linux 8 libsoup: Null pointer deference on libsoup6.5CNA v3.10.4%2025-04-14Fix
CVE-2025-32909Red Hat Enterprise Linux 8 libsoup: Null pointer dereference on libsoup5.3CNA v3.10.5%2025-04-14Fix
CVE-2025-32908Red Hat Enterprise Linux 10 libsoup: Denial of service on libsoup through HTTP/2 server7.5CNA v3.10.6%2025-04-14Fix
CVE-2025-32907libsoup HTTP range request handling denial of service5.3CNA v3.10.7%2025-04-14Fix
CVE-2025-32906Red Hat Enterprise Linux 10 Libsoup: Out-of-bounds reads in soup_headers_parse_request7.5CNA v3.11.0%2025-04-14Fix
CVE-2025-32093Mattermost syatem admin profile modification by delegated granular administration role4.7CNA v3.10.2%2025-04-14Fix
CVE-2025-31490AutoGPT allows SSRF due to DNS Rebinding in requests wrapper7.5CNA v3.10.5%2025-04-14Fix
CVE-2025-31344The giflib open-source component has a buffer overflow7.3CNA v3.10.3%2025-04-14Fix
CVE-2025-30516Unauthorized Notification Exposure in Mobile App under Specific Conditions2.0CNA v3.10.3%2025-04-14Fix
CVE-2025-29720langgenius dify server-side request forgery4.8CISA ADP v3.10.2%2025-04-14
CVE-2025-27009My auctions allegro WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-04-14Fix
CVE-2025-24859Apache Roller: Insufficient session expiration on Password Change2.1CNA v4.01.1%2025-04-14Fix
CVE-2025-22373SicommNet BASEC XSS, HTML and Style injection on login page8.7CNA v4.00.5%2025-04-14
CVE-2025-22372Insecure password storage in SicommNet BASEC8.4CNA v4.00.2%2025-04-14
CVE-2025-22371SicommNet BASEC SQL command improper neutralization9.3CNA v4.00.6%2025-04-14Fix
CVE-2025-3593ZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted upload9.8v3.10.6%2025-04-14
CVE-2025-3592ZHENFENG13/code-projects My-Blog-layui edit cross-site scripting5.4v3.10.4%2025-04-14
CVE-2025-3591ZHENFENG13/code-projects My-Blog-layui edit cross-site scripting5.4v3.10.4%2025-04-14
CVE-2025-3590Adianti Framework deserialization5.3CNA v4.00.4%2025-04-14
CVE-2025-3589SourceCodester Music Class Enrollment System manage_class.php SQL injection9.8v3.10.6%2025-04-14
CVE-2025-3588joelittlejohn jsonschema2pojo JSON File SchemaRule.java apply stack-based overflow4.8CNA v4.00.2%2025-04-14
CVE-2025-3587ZeroWdd/code-projects StudentManager getTeacherList improper authorization8.8v3.10.5%2025-04-14
CVE-2025-3585westboy CicadasCMS JSP parser upload unrestricted upload8.8v3.10.6%2025-04-14
CVE-2025-3572Intumit SmartRobot server-side request forgery7.5CNA v3.10.5%2025-04-14Fix
CVE-2025-3571Fannuo Enterprise Content Management System 凡诺企业网站管理系统 cms_chip.php SQL injection5.3CNA v4.00.3%2025-04-14
CVE-2025-3570JamesZBL/code-projects db-hospital-drug ContentController.java save cross-site scripting6.1v3.10.4%2025-04-14
CVE-2025-3569JamesZBL/code-projects db-hospital-drug ShiroConfig.java improper authorization5.3CNA v4.00.4%2025-04-14
CVE-2025-3568Webkul Krayin CRM SVG file edit cross-site scripting5.4v3.10.4%2025-04-14Exploit code
CVE-2025-3567veal98 小牛肉 Echo 开源社区系统 Ticket Handler improper authorization5.3CNA v4.00.3%2025-04-14
CVE-2025-3566veal98 小牛肉 Echo 开源社区系统 uploadMdPic unrestricted upload6.9CNA v4.00.4%2025-04-14
CVE-2025-3565code-projects StudentManager Announcement Management Section unrestricted file upload7.2v3.10.6%2025-04-14
CVE-2025-3564Huanfenz/code-projects StudentManager Teacher String improper authorization6.5v3.10.5%2025-04-14
CVE-2025-3563WuzhiCMS setting index.php set code injection7.2v3.10.7%2025-04-14
CVE-2025-3562Yonyou YonBIP userfile FileInputStream path traversal5.3CNA v4.00.6%2025-04-14
CVE-2025-3561ghostxbh uzy-ssm-mall cross-site request forgery6.5v3.10.3%2025-04-14
CVE-2025-3560ghostxbh uzy-ssm-mall product cross-site scripting5.4v3.10.4%2025-04-14
CVE-2025-3559ghostxbh uzy-ssm-mall 20 ForeProductListController SQL injection9.8v3.10.6%2025-04-14
CVE-2025-3558ghostxbh uzy-ssm-mall uploadUserHeadImage unrestricted upload9.8v3.10.6%2025-04-14
CVE-2025-3557ScriptAndTools eCommerce-website-in-PHP cross-site request forgery5.3CNA v4.00.3%2025-04-14
CVE-2025-3556ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication8.1v3.11.0%2025-04-14
CVE-2025-3555ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication8.1v3.11.0%2025-04-14
CVE-2025-3554Phpshe api.php cross-site scripting6.1v3.10.5%2025-04-14
CVE-2025-3553Phpshe admin.php pe_delete SQL injection9.8v3.10.6%2025-04-14
CVE-2025-3550wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System detail improper authorization5.3CNA v4.00.3%2025-04-14
CVE-2025-3549Open Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflow3.3NVD v3.10.3%2025-04-14Fix
CVE-2025-3548Open Asset Import Library Assimp file types.h Set heap-based overflow3.3NVD v3.10.3%2025-04-14Fix
CVE-2025-3547frdel Agent-Zero get_work_dir_files path traversal5.3CNA v4.00.5%2025-04-14
CVE-2025-3546H3C Magic NX15 command injection8.6CNA v4.01.6%2025-04-14Fix
CVE-2025-3545H3C Magic NX15 command injection8.6CNA v4.01.1%2025-04-14Fix
CVE-2025-3544H3C Magic NX15 command injection8.6CNA v4.01.1%2025-04-14Fix
CVE-2025-3543H3C Magic NX15 command injection8.6CNA v4.01.1%2025-04-14Fix
CVE-2025-3542H3C Magic NX15 command injection8.6CNA v4.01.1%2025-04-14Fix
CVE-2025-3277SQLite An integer overflow9.8NVD v3.11.3%2025-04-14Fix
CVE-2025-2572WhatsUp Gold NmConfigurationManager.exe database manipulation vulnerability5.6CNA v3.10.3%2025-04-14Fix
CVE-2025-2563User Registration and Membership WordPress plugin unauthenticated privilege escalation8.1CISA ADP v3.148.8%2025-04-14NucleiMetasploitExploit codeFix
CVE-2025-2475Mattermost Unauthorized Bot Login using Credentials5.4CNA v3.10.2%2025-04-14Fix
CVE-2025-2424Mattermost Leaked Metadata of Deleted files via Bookmark Creation3.1CNA v3.10.3%2025-04-14Fix
CVE-2025-2161Pegasystems Pega Infinity cross-site scripting7.1CNA v3.10.3%2025-04-14Fix
CVE-2025-2160Pegasystems Pega Infinity cross-site scripting8.1CNA v3.10.3%2025-04-14Fix
CVE-2025-1782In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the PHP code allowing an attacker to do anything as the web server user. This flaw requires the attacker to be authenticated w9.9CNA v3.10.5%2025-04-14Fix
CVE-2025-3541H3C Magic NX15 command injection8.6CNA v4.01.1%2025-04-13Fix
CVE-2025-3540H3C Magic NX15 command injection8.6CNA v4.01.1%2025-04-13Fix
CVE-2025-3539H3C Magic NX15 command injection8.6CNA v4.01.1%2025-04-13Fix
CVE-2025-3538D-Link DI-8100 jhttpd auth.asp auth_asp stack-based overflow8.7CNA v4.013.2%2025-04-13Emerging Threats
CVE-2025-3537Tutorials-Website Employee Management System update-user.php improper authorization6.9CNA v4.00.7%2025-04-13
CVE-2025-3536Tutorials-Website Employee Management System delete-user.php improper authorization6.9CNA v4.00.7%2025-04-13
CVE-2025-3535shuanx BurpAPIFinder BurpApiFinder.db denial of service5.3CNA v4.00.5%2025-04-13
CVE-2025-3534PowerCreator CMS OpenPublicCourse.aspx SQL injection5.3CNA v4.00.3%2025-04-13
CVE-2025-3533YouDianCMS index.html.Attackers cross-site scripting6.1v3.10.5%2025-04-13
CVE-2025-3532YouDianCMS index.html.Attackers cross-site scripting6.1v3.10.5%2025-04-13
CVE-2025-3531YouDianCMS index.html cross-site scripting6.1v3.10.5%2025-04-13
CVE-2025-3445Mholt/archiver vulnerable to path traversal via Crafted ZIP file8.1CNA v3.10.5%2025-04-13Fix
CVE-2025-3423IBM Aspera Faspex 5 cross-site scripting5.4CNA v3.10.3%2025-04-13Fix
CVE-2025-2814Crypt::CBC versions between and for Perl may use insecure rand function for cryptographic functions4.0CISA ADP v3.10.2%2025-04-13Fix
CVE-2025-32726Microsoft Visual Studio Code elevation of privilege6.8CNA v3.10.5%2025-04-12Fix
CVE-2025-29834Microsoft Edge (Chromium-based) remote code execution7.5CNA v3.10.6%2025-04-12Fix
CVE-2025-29803Microsoft SQL Server Management Studio uncontrolled search path7.3CNA v3.10.8%2025-04-12Fix
CVE-2025-3418WPC Admin Columns - Authenticated (Subscriber+) privilege escalation via User Meta Update8.8CNA v3.10.4%2025-04-12Fix
CVE-2025-3292User Registration and Membership WordPress plugin insecure direct object reference4.3CNA v3.10.3%2025-04-12Fix
CVE-2025-3282User Registration and Membership WordPress plugin insecure direct object reference5.3CNA v3.10.3%2025-04-12Fix
CVE-2025-3276SKT Blocks Gutenberg based Page Builder WordPress plugin stored cross-site scripting5.4v3.10.2%2025-04-12Fix
CVE-2025-2881Developer Toolbar WordPress plugin unauthenticated information exposure5.3CNA v3.10.4%2025-04-12
CVE-2025-2871WordPress Mega Menu QuadMenu plugin cross-site request forgery to limited user Meta update4.3CNA v3.10.2%2025-04-12Fix
CVE-2025-2841Cart66 Cloud WordPress plugin unauthenticated information exposure5.3CNA v3.10.4%2025-04-12
CVE-2025-2269Photo Gallery by 10Web Mobile-Friendly Image Gallery reflected cross-site scripting6.1CNA v3.10.3%2025-04-12Fix
CVE-2025-1456Royal Elementor Addons and Templates WordPress plugin DOM-Based stored cross-site scripting5.4v3.10.3%2025-04-12Fix
CVE-2025-1455Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2025-04-12Fix
CVE-2025-32816CodeLit CourseLit web parameter tampering3.1CNA v3.10.3%2025-04-11Fix
CVE-2025-32809W. W. Norton InQuizitive cross-site scripting5.4v3.10.3%2025-04-11
CVE-2025-32808W. W. Norton InQuizitive client-side enforcement of server-side security7.7v3.10.4%2025-04-11
CVE-2025-32807FusionDirectory A path traversal5.3CNA v3.10.6%2025-04-11Fix
CVE-2025-32681Error Log Viewer By WP Guru WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-11
CVE-2025-32672Ultimate Bootstrap Elements for Elementor WordPress plugin local file inclusion8.1CNA v3.10.9%2025-04-11Fix
CVE-2025-32671Print Science Designer WordPress plugin arbitrary file download7.5CNA v3.10.7%2025-04-11
CVE-2025-32663FAT Cooming Soon WordPress plugin local file inclusion8.1CNA v3.10.9%2025-04-11
CVE-2025-32656Testimonial Slider and Showcase Pro WordPress plugin local file inclusion8.1CNA v3.10.9%2025-04-11
CVE-2025-32654Motors WordPress plugin local file inclusion8.1CNA v3.10.9%2025-04-11Fix
CVE-2025-32650Accessibility Suite by Ability, Inc WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-11Fix
CVE-2025-32633Database Toolset WordPress plugin arbitrary file deletion8.6CNA v3.10.8%2025-04-11
CVE-2025-32632Automatic Ban IP WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-11
CVE-2025-32631Oxygen MyData for WooCommerce WordPress plugin arbitrary file deletion8.6CNA v3.10.8%2025-04-11Fix
CVE-2025-32629WP-BusinessDirectory WordPress plugin arbitrary file deletion8.6CNA v3.10.8%2025-04-11Fix
CVE-2025-32627JS Job Manager WordPress plugin local file inclusion8.1CNA v3.10.9%2025-04-11
CVE-2025-32618Wishlist WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-11
CVE-2025-32614EventON WordPress plugin local file inclusion8.8CNA v3.11.9%2025-04-11NucleiFix
CVE-2025-32607WpBookingly WordPress plugin PHP object injection9.8CNA v3.10.9%2025-04-11Fix
CVE-2025-32603WP Online Users Stats WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-11
CVE-2025-32601Twispay Credit Card Payments WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-11
CVE-2025-32600Tournamatch WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-11
CVE-2025-32599Task Scheduler WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-11
CVE-2025-32598WP Table Builder WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.4%2025-04-11Fix
CVE-2025-32589Flexi Guest Submit WordPress plugin local file inclusion8.1CNA v3.11.0%2025-04-11
CVE-2025-32587WooCommerce Pickupp WordPress plugin local file inclusion8.1CNA v3.11.0%2025-04-11
CVE-2025-32586ABA PayWay Payment Gateway for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-11Fix
CVE-2025-32585Shop Products Filter WordPress plugin local file inclusion7.5CNA v3.10.9%2025-04-11
CVE-2025-32579Sync Posts WordPress plugin arbitrary file upload9.9CNA v3.10.7%2025-04-11Exploit code
CVE-2025-32577Build App Online WordPress plugin local file inclusion9.8CNA v3.10.8%2025-04-11
CVE-2025-32569TableOn WordPress plugin PHP object injection9.8CNA v3.10.9%2025-04-11Fix
CVE-2025-32568EmpikPlace for Woocommerce WordPress plugin PHP object injection9.8CNA v3.10.9%2025-04-11Fix
CVE-2025-32567Easy Post Duplicator WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-11
CVE-2025-32565Neon Product Designer WordPress plugin unauthenticated SQL injection9.3CNA v3.10.5%2025-04-11
CVE-2025-32558Duplicate Title Checker WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-11
CVE-2025-32553Magnigenie RestroPress reflected cross-site scripting7.1CNA v3.10.4%2025-04-11Fix
CVE-2025-32551Connector to CiviCRM with CiviMcRestFace WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11Fix
CVE-2025-32542Eazy Plugin Manager WordPress plugin broken access control8.8CNA v3.10.6%2025-04-11Fix
CVE-2025-32541WooCommerce Sales MIS Report WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-32539WooCommerce Store Exporter WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11Fix
CVE-2025-32538Easy Post Duplicator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-32537Lock Your Updates WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-32536HTML5 Video Player with Playlist WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-32534Workbox Video from Vimeo and Youtube WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-32525Interactive Geo Maps WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11Fix
CVE-2025-32524MyWorks WooCommerce Sync for QuickBooks Online WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11Fix
CVE-2025-32523WooCommerce Payphone Gateway WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11Fix
CVE-2025-32519IDonate WordPress plugin local file inclusion9.8v3.10.9%2025-04-11
CVE-2025-32517MultiMailer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-32509Simple WP Events WordPress plugin arbitrary file deletion7.5CNA v3.10.9%2025-04-11Fix
CVE-2025-32491Rankology SEO On-site SEO WordPress plugin privilege escalation9.8CNA v3.10.8%2025-04-11Fix
CVE-2025-32427Formie has a XSS vulnerability for importing forms5.3CNA v4.00.2%2025-04-11Fix
CVE-2025-32426Formie has a XSS vulnerability for email notification content for preview4.6CNA v3.10.2%2025-04-11Fix
CVE-2025-32367Oz Forensics face recognition application forced browsing8.6CNA v3.10.4%2025-04-11Fix
CVE-2025-32144Job Board Manager WordPress plugin PHP object injection8.8CNA v3.11.0%2025-04-11
CVE-2025-32143Accordion WordPress plugin PHP object injection8.8CNA v3.11.0%2025-04-11Fix
CVE-2025-32107TP-Link Deco BE65 Pro OS command injection8.0CNA v3.01.6%2025-04-11
CVE-2025-32080The Wikimedia Foundation Mediawiki cross-origin data leak in mobilefrontend via lazy load images6.9CNA v4.00.5%2025-04-11
CVE-2025-32079Saving the right content to MediaWiki:GrowthMentors.json can take down the site6.5CISA ADP v3.10.4%2025-04-11
CVE-2025-32078The Wikimedia Foundation Mediawiki XSSes and potential RCE in Special:VersionCompare6.9CNA v4.00.4%2025-04-11
CVE-2025-32077The Wikimedia Foundation Mediawiki XSSes in Extension:SimpleCalendar6.9CNA v4.00.4%2025-04-11
CVE-2025-32076The Wikimedia Foundation Mediawiki evil regex used to process user-provided data in VisualData6.9CNA v4.00.4%2025-04-11
CVE-2025-32075The Wikimedia Foundation Mediawiki IP and user agent leaks in Extension:Tabs6.9CNA v4.00.4%2025-04-11
CVE-2025-32074The Wikimedia Foundation Mediawiki XSSes in Extension:ConfirmAccount5.4CISA ADP v3.10.2%2025-04-11
CVE-2025-32073The Wikimedia Foundation Mediawiki system message XSS in HTMLTags5.4CISA ADP v3.10.2%2025-04-11
CVE-2025-32072The Wikimedia Foundation Mediawiki Core HTML injection in feed output from i18n message6.9CNA v4.00.5%2025-04-11Fix
CVE-2025-32071The Wikimedia Foundation Mediawiki wikibase CommonsInlineImageFormatter: I18n XSS5.4CISA ADP v3.10.2%2025-04-11
CVE-2025-32070The Wikimedia Foundation Mediawiki XSSes in AJAXPoll5.4CISA ADP v3.10.2%2025-04-11
CVE-2025-32069The Wikimedia Foundation Mediawiki improper input validation5.4CISA ADP v3.10.2%2025-04-11
CVE-2025-32068The Wikimedia Foundation Mediawiki incorrect authorization5.4CISA ADP v3.10.3%2025-04-11
CVE-2025-32067The Wikimedia Foundation Mediawiki i18n XSS vulnerability in message growthexperiments5.4CISA ADP v3.10.2%2025-04-11
CVE-2025-31935Subnet Solutions PowerSYSTEM Center deserialization of untrusted data6.9CNA v4.00.2%2025-04-11Fix
CVE-2025-31932OPEN BizRobo! deserialization of untrusted data8.8CNA v3.00.7%2025-04-11
CVE-2025-31599Bulk Product Sync WordPress plugin SQL injection9.3CNA v3.10.7%2025-04-11Fix
CVE-2025-31565WPSmartContracts WordPress plugin SQL injection9.3CNA v3.10.7%2025-04-11
CVE-2025-31379Insert HTML Here WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-31378Oppso Unit Converter WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-31362OPEN BizRobo! hard-coded cryptographic key3.7CNA v3.00.2%2025-04-11
CVE-2025-31354Subnet Solutions PowerSYSTEM Center out-of-bounds read5.3CNA v4.00.1%2025-04-11Fix
CVE-2025-31041AnyTrack Affiliate Link Manager WordPress plugin broken access control7.5CNA v3.10.6%2025-04-11Fix
CVE-2025-31040WP Food ordering and Restaurant Menu WordPress plugin local file inclusion8.1CNA v3.11.1%2025-04-11
CVE-2025-31028WP Hide Categories WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-31021Mobile Smart WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-11
CVE-2025-31015SMTP Service, Email Delivery Solved! MailHawk WordPress plugin local file inclusion7.5CNA v3.10.9%2025-04-11Fix
CVE-2025-31014Material Dashboard WordPress plugin local file inclusion7.5CNA v3.11.1%2025-04-11Fix
CVE-2025-26335Dell Power Protect Cyber Recovery information disclosure5.8CNA v3.10.3%2025-04-11Fix
CVE-2025-23391Rancher: Restricted Administrator can change Administrator's passwords9.1CNA v3.10.5%2025-04-11Fix
CVE-2025-23389SUSE Rancher improper access control8.4CNA v3.10.5%2025-04-11Fix
CVE-2025-23388SUSE Rancher unauthenticated stack overflow in /v3-public/authproviders API8.2CNA v3.10.6%2025-04-11Fix
CVE-2025-23387Rancher's SAML-based login via CLI can be denied by unauthenticated users5.3CNA v3.10.6%2025-04-11Fix
CVE-2025-3512Qt buffer overflow in QTextMarkdownImporter4.8CNA v4.00.2%2025-04-11Fix
CVE-2025-3439Everest Forms WordPress plugin PHP object injection9.8CNA v3.11.2%2025-04-11Fix
CVE-2025-3434SMTP for Amazon SES YaySMTP WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2025-04-11Fix
CVE-2025-3422Everest Forms WordPress plugin authenticated (Subscriber+) arbitrary shortcode execution6.3v3.10.3%2025-04-11Fix
CVE-2025-3421Everest Forms WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2025-04-11Fix
CVE-2025-2636InstaWP Connect WordPress plugin unauthenticated local PHP file inclusion8.1CNA v3.110.4%2025-04-11NucleiFix
CVE-2025-2575Z Companion WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload5.4v3.10.3%2025-04-11Fix
CVE-2025-2541WP Project Manager WordPress plugin stored cross-site scripting5.4v3.10.3%2025-04-11Fix
CVE-2025-2128Cost Calculator Builder WordPress plugin SQL injection6.5CNA v3.10.4%2025-04-11Fix
CVE-2025-1386Query smuggling in ch-go library5.9CNA v4.00.4%2025-04-11Fix