CVE-2025 list

CVE-2025 records published in April 2025

Page four of four: records 3,001 to 3,694 of the 3,694 published in April 2025, newest first. The first page carries the figures for April 2025.

CVE-2025 records published in April 2025, newest first: records 3,001 to 3,694 of 3,694
CVE Summary CVSS EPSS Published Signals
CVE-2025-3197expand-object Vulnerable to prototype pollution via the expand function6.9CNA v4.00.4%2025-04-04
CVE-2025-3196Open Asset Import Library Assimp Malformed File MD2Loader.cpp InternReadFile stack-based overflow5.5v3.10.3%2025-04-04Fix
CVE-2025-3195itsourcecode Online Blood Bank Management System bbms.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3194bigint-buffer vulnerable to buffer overflow via toBigIntLE function8.7CNA v4.00.7%2025-04-04
CVE-2025-3192Browsershot server-side request forgery (SSRF) via setURL function8.8CNA v4.00.3%2025-04-04
CVE-2025-3191react-draft-wysiwyg React Draft Wysiwyg cross-site scripting (XSS) via the Embedded Button5.1CNA v4.00.2%2025-04-04
CVE-2025-3189Stored cross-site scripting (XSS) in DoWISP4.8CNA v4.00.4%2025-04-04Fix
CVE-2025-3188PHPGurukul e-Diary Management System add-notes.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3187PHPGurukul e-Diary Management System login.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3186Projectworlds Online Doctor Appointment Booking System invoice.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3105Vehica Core WordPress plugin authenticated (Subscriber+) privilege escalation8.8CNA v3.10.4%2025-04-04Fix
CVE-2025-3087Stored XSS vulnerability in M-Files Web5.1CNA v4.00.3%2025-04-04Fix
CVE-2025-3086M-Files Server user in anonymous role could create and delete views6.3CNA v4.00.4%2025-04-04Fix
CVE-2025-2836RegistrationMagic WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-04Fix
CVE-2025-2798Woffice WordPress theme authentication bypass via Registration role9.8CNA v3.10.7%2025-04-04Fix
CVE-2025-2797Woffice Core WordPress plugin cross-site request forgery to user Registration Approval5.4v3.10.1%2025-04-04Fix
CVE-2025-2780Woffice Core WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.8%2025-04-04Fix
CVE-2025-2317Product Filter by WBW WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2025-04-04Fix
CVE-2025-2279Maps - Google Maps WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.3%2025-04-04
CVE-2025-2270Countdown WordPress plugin local file inclusion8.1CNA v3.11.3%2025-04-04Fix
CVE-2025-2245Server side request forgery in GravityZone Update Server using Null Bytes (VA-12646)6.9CNA v4.00.3%2025-04-04Fix
CVE-2025-2244Insecure PHP deserialization issue in GravityZone Console (VA-12634)9.5CNA v4.01.1%2025-04-04Fix
CVE-2025-2243SSRF in GravityZone Console via DNS Truncation (VA-12634)6.9CNA v4.00.4%2025-04-04Fix
CVE-2025-2159Stored XSS in M-Files Admin user interface5.1CNA v4.00.2%2025-04-04Fix
CVE-2025-2075Uncanny Automator WordPress plugin missing authorization authenticated privilege escalation8.8CNA v3.12.7%2025-04-04NucleiFix
CVE-2025-1865Local privilege escalation in Virtual CloneDrive Kernel driver8.5CNA v4.00.2%2025-04-04Fix
CVE-2025-0468GPU DDK ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)7.1CISA ADP v3.10.2%2025-04-04Fix
CVE-2025-32054JetBrains IntelliJ IDEA sensitive information in log files3.3CNA v3.10.4%2025-04-03Fix
CVE-2025-32053libsoup sniff_feed_or_html and skip_insignificant_space functions buffer over-read6.5CNA v3.10.7%2025-04-03Fix
CVE-2025-32052Red Hat Enterprise Linux 8 libsoup: Heap buffer overflow in sniff_unknown6.5CNA v3.10.7%2025-04-03Fix
CVE-2025-32051Red Hat Enterprise Linux 10 libsoup: Segmentation fault when parsing malformed data uri5.9CNA v3.10.6%2025-04-03Fix
CVE-2025-32050Red Hat Enterprise Linux 8 Libsoup: Integer overflow in append_param_quoted5.9CNA v3.10.8%2025-04-03Fix
CVE-2025-32049Red Hat Enterprise Linux 10 libsoup: Denial of service attack to websocket server7.5CNA v3.10.9%2025-04-03Fix
CVE-2025-31911Social Share And Social Locker WordPress plugin SQL injection9.3CNA v3.10.4%2025-04-03
CVE-2025-31909Apptivo Business Site CRM WordPress plugin arbitrary content deletion vulnerability7.5CNA v3.10.4%2025-04-03Fix
CVE-2025-31907Team Builder WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03
CVE-2025-31905Team Rosters WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03Fix
CVE-2025-31903XV Random Quotes WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03Fix
CVE-2025-31902Social Share And Social Locker WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03
CVE-2025-31901Digihood HTML Sitemap WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03
CVE-2025-31900Lexicata WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03
CVE-2025-31899Awesome Logos WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03
CVE-2025-31898MediaView WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03Fix
CVE-2025-31896GetBookingsWP WordPress plugin broken access control6.5CNA v3.10.3%2025-04-03
CVE-2025-31893Botnet Attack Blocker WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-03
CVE-2025-31876Payday WordPress plugin broken access control5.8CNA v3.10.3%2025-04-03
CVE-2025-31858Local Magic WordPress plugin broken access control6.5CNA v3.10.3%2025-04-03
CVE-2025-31841FPW Category Thumbnails WordPress plugin broken access control6.3CNA v3.10.2%2025-04-03
CVE-2025-31827Fonto WordPress plugin arbitrary file download4.9CNA v3.10.6%2025-04-03Fix
CVE-2025-31825Category Icon WordPress plugin arbitrary file download4.9CNA v3.10.6%2025-04-03Fix
CVE-2025-31800Publitio WordPress plugin arbitrary file read6.5CNA v3.10.6%2025-04-03Fix
CVE-2025-31795Shopify to WooCommerce Migration WordPress plugin settings Change vulnerability6.5CNA v3.10.4%2025-04-03
CVE-2025-31794WR Price List Manager For Woocommerce WordPress plugin arbitrary content deletion vulnerability5.4CNA v3.10.4%2025-04-03Fix
CVE-2025-31789TextMe SMS WordPress plugin broken access control6.5CNA v3.10.3%2025-04-03Fix
CVE-2025-31768Widget Manager Light WordPress plugin broken access control6.5CNA v3.10.4%2025-04-03
CVE-2025-31758BinaryCarpenter Free WooCommerce Product Table View missing authorization6.5CNA v3.10.4%2025-04-03
CVE-2025-31746Clients WordPress plugin broken access control6.4CNA v3.10.3%2025-04-03
CVE-2025-31739Minimalistic Event Manager WordPress plugin broken access control6.4CNA v3.10.3%2025-04-03
CVE-2025-31736Rich Text Editor WordPress plugin broken access control6.5CNA v3.10.4%2025-04-03
CVE-2025-31729WooTumblog WordPress plugin content injection6.5CNA v3.10.4%2025-04-03
CVE-2025-31626Support Helpdesk Ticket System Lite WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03Fix
CVE-2025-31622Advanced Typekit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-03
CVE-2025-31582Contact Form vCard Generator WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03
CVE-2025-31581WP Video Playlist WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2025-04-03
CVE-2025-31573PeproDev CF7 Database WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03
CVE-2025-31558TailPress WordPress plugin sensitive data exposure5.8CNA v3.10.4%2025-04-03
CVE-2025-31554Docxpresso WordPress plugin arbitrary file download5.9CNA v3.10.5%2025-04-03
CVE-2025-31541TuriTop Booking System WordPress plugin broken access control6.5CNA v3.10.3%2025-04-03Fix
CVE-2025-31536CF7 Spreadsheets WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03
CVE-2025-31489MinIO performs incomplete signature validation for unsigned-trailer uploads8.7CNA v4.02.5%2025-04-03NucleiEmerging ThreatsFix
CVE-2025-31487The XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA server7.7CNA v3.10.4%2025-04-03Fix
CVE-2025-31486Vite allows server.fs.deny to be bypassed with .svg or relative paths5.3CNA v3.140.5%2025-04-03NucleiEmerging ThreatsExploit codeFix
CVE-2025-31485api-platform core GraphQL grant on a property might be cached with different objects7.5CNA v3.10.6%2025-04-03Fix
CVE-2025-31483Stored XSS in Miniflux Media Proxy due to improper Content-Security-Policy configuration4.8CNA v4.00.4%2025-04-03Fix
CVE-2025-31481api-platform core GraphQL query operations security can be bypassed7.5CNA v3.10.5%2025-04-03Fix
CVE-2025-31468WP_Identicon WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03
CVE-2025-31467Flickr Photostream WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03
CVE-2025-31442Search engine keywords highlighter WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03
CVE-2025-31436Angelo Mandato Blubrry PowerPress Podcasting plugin MultiSite add-on reflected cross-site scripting7.1CNA v3.10.3%2025-04-03
CVE-2025-31334RARLAB WinRAR missing warning for unsafe actions6.8CNA v3.01.3%2025-04-03Fix
CVE-2025-31161CrushFTP authentication bypass9.8NVD v3.1100.0%2025-04-03KEVNucleiEmerging ThreatsExploit codeFix
CVE-2025-31127Element X Android well-known file handling information disclosure5.3CNA v3.10.2%2025-04-03Fix
CVE-2025-31126Element X iOS well-known file handling information disclosure5.3CNA v3.10.2%2025-04-03Fix
CVE-2025-31119In generator-jhipster-entity-audit when having Javers selected as Entity Audit Framework7.7CNA v3.10.5%2025-04-03Fix
CVE-2025-31115XZ has a heap-use-after-free bug in threaded .xz decoder8.7CNA v4.00.7%2025-04-03Fix
CVE-2025-31098DeBounce Email Validator WordPress plugin local file inclusion7.5CNA v3.10.7%2025-04-03Fix
CVE-2025-31091CM Header and Footer WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-03Fix
CVE-2025-30916Residential Address Detection WordPress plugin broken access control6.5CNA v3.10.4%2025-04-03Fix
CVE-2025-30915Small Package Quotes Worldwide Express Edition WordPress plugin broken access control6.5CNA v3.10.4%2025-04-03Fix
CVE-2025-30908Web Directory Free WordPress plugin CSRF to cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-03Fix
CVE-2025-30889Testimonial Slider WordPress plugin PHP object injection8.8CNA v3.10.5%2025-04-03Fix
CVE-2025-30858Snow Storm WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03Fix
CVE-2025-30616Latest Custom Post Type Updates WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03
CVE-2025-30611Wptobe-signinup WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-03
CVE-2025-30596include-file WordPress plugin arbitrary file download6.5CNA v3.10.5%2025-04-03
CVE-2025-30485Century Systems FutureNet NXR-1420 FutureNet NXR series symlink following6.2CNA v3.00.3%2025-04-03
CVE-2025-30406Gladinet CentreStack and Triofox use of hard-coded cryptographic key9.8v3.194.3%2025-04-03KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-30370jupyterlab-git has a command injection vulnerability in Open Git Repository in Terminal7.4CNA v3.10.6%2025-04-03Fix
CVE-2025-29991Yubico YubiKey weak authentication2.2CNA v3.10.1%2025-04-03Fix
CVE-2025-29987Dell DD OS insufficient access control granularity8.8CNA v3.10.5%2025-04-03Fix
CVE-2025-29647Seacms SQL injection9.8CISA ADP v3.10.5%2025-04-03
CVE-2025-29570Szlbt Lbt-t300-t400 incorrect default permissions7.8CISA ADP v3.10.2%2025-04-03
CVE-2025-29504huang-yk student-manage incorrect default permissions7.8CISA ADP v3.10.2%2025-04-03
CVE-2025-29462Tenda AC15 buffer overflow9.8CISA ADP v3.10.6%2025-04-03
CVE-2025-29369Carmelogarcia Matrimonial Site SQL injection9.8CISA ADP v3.10.7%2025-04-03
CVE-2025-29064TOTOLINK X18 code injection9.8CISA ADP v3.10.8%2025-04-03
CVE-2025-26818Netwrix Password Secure code injection9.8CISA ADP v3.11.1%2025-04-03Fix
CVE-2025-26817Netwrix Password Secure OS command injection9.8CISA ADP v3.11.6%2025-04-03Fix
CVE-2025-25000Microsoft Edge (Chromium-based) remote code execution8.8CNA v3.11.0%2025-04-03Fix
CVE-2025-22931OS4ED Opensis component /assets/stafffiles insecure direct object reference7.5CISA ADP v3.10.5%2025-04-03
CVE-2025-22930OS4ED Opensis SQL injection9.8CISA ADP v3.10.5%2025-04-03
CVE-2025-22929OS4ED Opensis SQL injection9.8CISA ADP v3.10.5%2025-04-03
CVE-2025-22928OS4ED Opensis SQL injection9.8CISA ADP v3.10.4%2025-04-03
CVE-2025-22927OS4ED Opensis path traversal9.1CISA ADP v3.10.8%2025-04-03
CVE-2025-22926OS4ED Opensis path traversal9.8CISA ADP v3.10.9%2025-04-03
CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways stack-based buffer overflow9.0CNA v3.1100.0%2025-04-03KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-22007Linux kernel Bluetooth null pointer dereference5.5v3.10.2%2025-04-03Fix
CVE-2025-22006Linux kernel TI AM65 CPSW Ethernet driver null pointer dereference5.5v3.10.2%2025-04-03Fix
CVE-2025-22005Linux kernel IPv6 next-hop route handling memory leak5.5NVD v3.10.2%2025-04-03Fix
CVE-2025-22004Linux kernel atm use-after-free8.6CNA v3.10.4%2025-04-03Fix
CVE-2025-22003Linux kernel ucan out-of-bounds read5.5v3.10.2%2025-04-03Fix
CVE-2025-22002Linux kernel netfs cache invalidation null pointer dereference5.5v3.10.2%2025-04-03Fix
CVE-2025-22001Linux kernel accel/qaic integer overflow7.8CNA v3.10.2%2025-04-03Fix
CVE-2025-22000Linux kernel transparent huge page folio splitting memory leak5.5v3.10.2%2025-04-03Fix
CVE-2025-21999Linux kernel procfs inode lookup use-after-free7.8CNA v3.10.2%2025-04-03Fix
CVE-2025-21998Linux kernel uefisecapp null pointer dereference4.7v3.10.1%2025-04-03Fix
CVE-2025-21997Linux kernel xsk integer overflow5.5v3.10.2%2025-04-03Fix
CVE-2025-21996Linux kernel radeon VCE driver vulnerability5.5v3.10.2%2025-04-03Fix
CVE-2025-21995Linux kernel DRM GPU scheduler fence handling vulnerability5.5v3.10.2%2025-04-03Fix
CVE-2025-3185Projectworlds Online Doctor Appointment Booking System patientupdateprofile.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3184Projectworlds Online Doctor Appointment Booking System profile.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3183Projectworlds Online Doctor Appointment Booking System patientupdateprofile.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3182Projectworlds Online Doctor Appointment Booking System getschedule.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3181Projectworlds Online Doctor Appointment Booking System appointment.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3180Projectworlds Online Doctor Appointment Booking System deleteschedule.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3179Projectworlds Online Doctor Appointment Booking System deletepatient.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3178Projectworlds Online Doctor Appointment Booking System deleteappointment.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3177FastCMS JWT hard-coded key8.1v3.10.5%2025-04-03
CVE-2025-3176Project Worlds Online Lawyer Management System single_lawyer.php SQL injection9.8v3.10.5%2025-04-03
CVE-2025-3175Project Worlds Online Lawyer Management System save_user_edit_profile.php SQL injection9.8v3.10.5%2025-04-03
CVE-2025-3174Project Worlds Online Lawyer Management System searchLawyer.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3173Project Worlds Online Lawyer Management System save_booking.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3172Project Worlds Online Lawyer Management System lawyer_booking.php SQL injection9.8v3.10.5%2025-04-03
CVE-2025-3171Project Worlds Online Lawyer Management System approve_lawyer.php SQL injection9.8v3.10.5%2025-04-03
CVE-2025-3170Project Worlds Online Lawyer Management System admin_user.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3169Projeqtor saveAttachment.php unrestricted upload2.3CNA v4.00.3%2025-04-03
CVE-2025-3168PHPGurukul Time Table Generator System edit-class.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3167Tenda AC23 API Interface VerAPIMant denial of service7.5v3.10.9%2025-04-03
CVE-2025-3166code-projects Product Management System Search Product menu search_item stack-based overflow7.8v3.10.4%2025-04-03
CVE-2025-3165thu-pacman chitu backend.py torch.load deserialization4.8CNA v4.00.2%2025-04-03
CVE-2025-3164Tencent Music Entertainment SuperSonic H2 Database Connection testConnect code injection9.8v3.10.7%2025-04-03
CVE-2025-3163InternLM LMDeploy conf.py open code injection7.8v3.10.4%2025-04-03
CVE-2025-3162InternLM LMDeploy PT file utils.py load_weight_ckpt deserialization7.8v3.10.3%2025-04-03
CVE-2025-3161Tenda AC10 ShutdownSetAdd stack-based overflow8.7CNA v4.00.9%2025-04-03
CVE-2025-3160Open Asset Import Library Assimp File SceneCombiner.cpp AddNodeHashes out-of-bounds3.3NVD v3.10.3%2025-04-03Fix
CVE-2025-3159Assimp ASE file parser heap-based buffer overflow7.8v3.10.3%2025-04-03Fix
CVE-2025-3158Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow7.8v3.10.3%2025-04-03Fix
CVE-2025-3157Intelbras WRN 150 Wireless menu cross-site scripting4.8CNA v4.00.3%2025-04-03
CVE-2025-3155Yelp: Arbitrary file read7.4CNA v3.114.2%2025-04-03Fix
CVE-2025-3153Concrete CMS vulnerable to cross-site request forgery (CSRF) and cross-site scripting (XSS)5.1CNA v4.00.2%2025-04-03Fix
CVE-2025-3152caipeichao ThinkOX Search search.html cross-site scripting5.1CNA v4.00.3%2025-04-03
CVE-2025-3151SourceCodester Gym Management System signup.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3150itning Student Homework Management System cross-site request forgery5.3CNA v4.00.3%2025-04-03
CVE-2025-3149itning Student Homework Management System Edit Job page fileupload cross-site scripting4.8v3.10.3%2025-04-03
CVE-2025-3148codeprojects Product Management System Login buffer overflow7.8v3.10.2%2025-04-03
CVE-2025-3147PHPGurukul Boat Booking System add-subadmin.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3146PHPGurukul Bus Pass Management System view-pass-detail.php SQL injection9.8v3.10.6%2025-04-03Exploit code
CVE-2025-3145MindSpore MindSpore.numpy.fft.rfft2 memory corruption4.8CNA v4.00.2%2025-04-03
CVE-2025-3144MindSpore MindSpore.numpy.fft.hfftn memory corruption4.8CNA v4.00.2%2025-04-03
CVE-2025-3143SourceCodester Apartment Visitor Management System visitor-entry.php SQL injection8.8v3.10.5%2025-04-03
CVE-2025-3142SourceCodester Apartment Visitor Management System add-apartment.php SQL injection8.8v3.10.5%2025-04-03
CVE-2025-3141SourceCodester Online Medicine Ordering System manage_category.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3140SourceCodester Online Medicine Ordering System view_category.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3139code-projects Bus Reservation System Login form login buffer overflow7.8v3.10.2%2025-04-03
CVE-2025-3138PHPGurukul Online Security Guards Hiring System edit-guard-detail.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3137PHPGurukul Online Security Guards Hiring System changeimage.php SQL injection9.8v3.10.6%2025-04-03
CVE-2025-3136PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption4.8CNA v4.00.3%2025-04-03Fix
CVE-2025-3135fcba_zzm ics-park Smart Park Management System update SQL injection9.8v3.10.4%2025-04-03
CVE-2025-3134code-projects Payroll Management System add_overtime.php SQL injection8.8v3.10.5%2025-04-03
CVE-2025-2946pgAdmin 4 vulnerable to cross-site scripting (XSS) via Query result Rendering9.1CNA v3.10.3%2025-04-03Fix
CVE-2025-2945pgAdmin 4: Remote code execution in Query tool and Cloud Deployment9.9CNA v3.156.3%2025-04-03MetasploitEmerging ThreatsExploit codeFix
CVE-2025-2874User Submitted Posts WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-04-03Fix
CVE-2025-2784Libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content6.5NVD v3.10.9%2025-04-03Fix
CVE-2025-2299LuckyWP Table of Contents WordPress plugin cross-site request forgery6.1v3.10.2%2025-04-03Fix
CVE-2025-2055MapPress Maps for WordPress plugin Contributor+ stored XSS6.8CISA ADP v3.10.5%2025-04-03Fix
CVE-2025-1663Unlimited Elements For Elementor WordPress plugin stored cross-site scripting5.4v3.10.2%2025-04-03Fix
CVE-2025-0279HCL Traveler is affected by generation of error messages containing sensitive information4.3CNA v3.10.3%2025-04-03Fix
CVE-2025-0278An internal path disclosure vulnerability affects HCL Traveler4.3CNA v3.10.3%2025-04-03Fix
CVE-2025-0272HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection5.4CNA v3.10.3%2025-04-03Fix
CVE-2025-31728Jenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration form5.5CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-31727Jenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` files5.5CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-31726Jenkins Stack Hammer Plugin Stores API Keys Unencrypted in Job `config.xml` files5.5CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-31725Jenkins Monitor-remote-job Plugin Stores Passwords Unencrypted5.5CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-31724Jenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys Unencrypted4.3CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-31723Jenkins Simple Queue Plugin cross-site request forgery (CSRF)4.3CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-31722Jenkins Templating Engine Plugin vulnerable to arbitrary code execution8.8CISA ADP v3.11.3%2025-04-02Exploit codeFix
CVE-2025-31721Jenkins missing permission check4.3CISA ADP v3.10.4%2025-04-02Fix
CVE-2025-31720Jenkins missing permission check4.3CISA ADP v3.10.4%2025-04-02Fix
CVE-2025-31484conda-forge infrastructure uses a bad token for Azure's cf-staging access9.3CNA v4.00.4%2025-04-02
CVE-2025-31479Canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output8.2CNA v3.10.6%2025-04-02Fix
CVE-2025-31477tauri-apps plugins-workspace improper Scope Validation in the open endpoint of tauri-plugin-shell9.3CNA v4.01.0%2025-04-02Fix
CVE-2025-31286Trend Micro Trend Vision One improper privilege management4.6CNA v3.10.5%2025-04-02Fix
CVE-2025-31285Trend Micro Trend Vision One improper privilege management4.6CNA v3.10.3%2025-04-02Fix
CVE-2025-31284Trend Micro Trend Vision One improper privilege management4.6CNA v3.10.3%2025-04-02Fix
CVE-2025-31283Trend Micro Trend Vision One improper privilege management4.6CNA v3.10.3%2025-04-02Fix
CVE-2025-31282Trend Micro Trend Vision One improper privilege management4.6CNA v3.10.3%2025-04-02Fix
CVE-2025-30218Next.js may leak x-middleware-subrequest-id to external hosts1.7CNA v4.00.4%2025-04-02Fix
CVE-2025-30090SquirrelMail cross-site scripting7.2CNA v3.10.3%2025-04-02
CVE-2025-30080Pexip Infinity improper input validation7.5CISA ADP v3.10.5%2025-04-02
CVE-2025-29982Dell Wyse Management Suite insecure inherited permissions6.8CNA v3.10.1%2025-04-02Fix
CVE-2025-29981Dell Wyse Management Suite information disclosure through data queries7.5CNA v3.10.4%2025-04-02Fix
CVE-2025-29719Remyandrade Employee Management System cross-site scripting6.1CISA ADP v3.10.3%2025-04-02
CVE-2025-29085Vipshop Saturn console vulnerable to SQL injection via ClusterKey component9.8CISA ADP v3.131.2%2025-04-02Nuclei
CVE-2025-29063LB-LINK BL-AC2100 command injection9.8CISA ADP v3.11.1%2025-04-02
CVE-2025-29062LB-LINK BL-AC2100 command injection9.8CISA ADP v3.11.1%2025-04-02
CVE-2025-27694Dell Wyse Management Suite denial of service5.3CNA v3.10.4%2025-04-02Fix
CVE-2025-27693Dell Wyse Management Suite cross-site scripting4.9CNA v3.10.3%2025-04-02Fix
CVE-2025-27692Dell Wyse Management Suite Repository unrestricted file upload4.7CNA v3.10.5%2025-04-02Fix
CVE-2025-27608Self cross-site scripting in Arduino IDE1.0CNA v4.00.2%2025-04-02Fix
CVE-2025-27556Django potential denial of service (DoS) on Windows7.5v3.11.0%2025-04-02Fix
CVE-2025-27244Hammock AssetView information disclosure5.9CNA v3.00.5%2025-04-02
CVE-2025-25060Hammock AssetView CLOUD AssetView and missing authentication8.2CNA v3.00.5%2025-04-02
CVE-2025-22925OS4ED Opensis SQL injection7.5CISA ADP v3.10.5%2025-04-02
CVE-2025-22924OS4ED Opensis SQL injection8.8CISA ADP v3.10.4%2025-04-02
CVE-2025-22923OS4ED Opensis path traversal8.8CISA ADP v3.10.9%2025-04-02
CVE-2025-21994Linux kernel ksmbd SMB ACL parsing vulnerability7.6CNA v3.10.3%2025-04-02Fix
CVE-2025-21993Linux kernel iscsi_ibft sysfs attributes out-of-bounds read7.1v3.10.2%2025-04-02Fix
CVE-2025-21992Linux kernel HID sensor hub driver denial of service5.5v3.10.2%2025-04-02Fix
CVE-2025-21991Linux kernel AMD microcode loader vulnerability7.8v3.10.2%2025-04-02Fix
CVE-2025-21990Linux kernel amdgpu GFX12 page table entries null pointer dereference5.5v3.10.2%2025-04-02Fix
CVE-2025-21989Linux kernel AMD display timing generator null pointer dereference5.5v3.10.2%2025-04-02Fix
CVE-2025-21988Linux kernel netfs read collection vulnerability9.8CNA v3.10.4%2025-04-02Fix
CVE-2025-21987Linux kernel amdgpu TTM buffer clearing vulnerability5.5v3.10.2%2025-04-02Fix
CVE-2025-20212Cisco Meraki MX Firmware uninitialized variable use7.7CNA v3.10.7%2025-04-02Fix
CVE-2025-20203Cisco Prime Infrastructure cross-site scripting4.8CNA v3.10.3%2025-04-02Fix
CVE-2025-20139Cisco Enterprise Chat and Email improper input validation7.5CNA v3.10.7%2025-04-02Fix
CVE-2025-20120Cisco Prime Infrastructure cross-site scripting6.1CNA v3.10.3%2025-04-02Fix
CVE-2025-3154Out-of-bounds array write due to invalid VerticesPerRow in Xpdf2.1CNA v4.00.2%2025-04-02Fix
CVE-2025-3130Obfuscate Moderately critical cross-site scripting SA-CONTRIB-2025-0295.4CISA ADP v3.10.2%2025-04-02Fix
CVE-2025-3129Access code Moderately critical Access bypass SA-CONTRIB-2025-0284.8CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-3123WonderCMS Theme Installation/Plugin Installation installUpdateModuleAction unrestricted upload7.2v3.10.6%2025-04-02
CVE-2025-3122WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference5.3v3.10.6%2025-04-02
CVE-2025-3121PyTorch torch.jit.jit_module_from_flatbuffer memory corruption5.5v3.10.3%2025-04-02Fix
CVE-2025-3120SourceCodester Apartment Visitors Management System add-apartment.php SQL injection9.8v3.10.6%2025-04-02
CVE-2025-3119SourceCodester Online Tutor Portal manage_course.php SQL injection9.8v3.10.6%2025-04-02
CVE-2025-3118SourceCodester Online Tutor Portal view_course.php SQL injection9.8v3.10.6%2025-04-02
CVE-2025-3099Advanced Search by My Solr Server WordPress plugin cross-site request forgery6.1CNA v3.10.2%2025-04-02
CVE-2025-3098Video Url WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-04-02
CVE-2025-3097wp Time Machine WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.3%2025-04-02
CVE-2025-3074Google Chrome Downloads inappropriate implementation5.4CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-3073Google Chrome Autofill inappropriate implementation5.4CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-3072Google Chrome Custom Tabs inappropriate implementation5.4CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-3071Google Chrome Navigations inappropriate implementation5.4CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-3070Google Chrome privilege escalation6.5CISA ADP v3.10.3%2025-04-02Fix
CVE-2025-3069Google Chrome extensions inappropriate implementation8.8CISA ADP v3.10.4%2025-04-02Fix
CVE-2025-3068Google Chrome Intents inappropriate implementation8.8CISA ADP v3.10.4%2025-04-02Fix
CVE-2025-3067Google Chrome Custom Tabs inappropriate implementation8.6NVD v4.00.8%2025-04-02Fix
CVE-2025-3066Google Chrome Site Isolation use-after-free8.8CISA ADP v3.10.4%2025-04-02Fix
CVE-2025-3063Shopper Approved Reviews - missing authorization to Authenticated arbitrary Options Update8.8CNA v3.10.4%2025-04-02Fix
CVE-2025-2842Red Hat OpenShift distributed tracing Tempo Operator information disclosure4.3CNA v3.10.4%2025-04-02Fix
CVE-2025-2786Red Hat OpenShift distributed tracing Tempo Operator information disclosure4.3CNA v3.10.4%2025-04-02Fix
CVE-2025-2779Insert Headers and Footers Code WordPress plugin unauthorized access6.5CNA v3.10.3%2025-04-02Fix
CVE-2025-2704OpenVPN improper check for exceptional conditions7.5CISA ADP v3.10.8%2025-04-02Fix
CVE-2025-2513Smart Icons For WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-02
CVE-2025-2483Gift Certificate Creator WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2025-04-02
CVE-2025-2005Rustaurius Front End Users registration form file upload field unrestricted file upload9.8CNA v3.122.0%2025-04-02Exploit codeFix
CVE-2025-1805Crypt::Salt for Perl uses insecure rand function when generating salts for cryptographic purposes5.3CISA ADP v3.10.5%2025-04-02
CVE-2025-0676Moxa EDF-G1002-BP Series commend injection leading to privilege escalation8.6CNA v4.01.0%2025-04-02Fix
CVE-2025-0415Moxa EDF-G1002-BP Series command injection in NTP setting9.2CNA v4.00.5%2025-04-02Fix
CVE-2025-0257HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services6.3CNA v3.10.3%2025-04-02Fix
CVE-2025-0154IBM TXSeries for Multiplatforms information disclosure5.3CNA v3.10.4%2025-04-02Fix
CVE-2025-0014AMD Ryzen™ AI Software incorrect default permissions7.3CNA v3.10.2%2025-04-02
CVE-2025-31910BookingPress WordPress plugin SQL injection7.6CNA v3.10.4%2025-04-01Fix
CVE-2025-31908JSON Structuring Markup WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-04-01
CVE-2025-31906WP Profitshare WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-04-01
CVE-2025-31904Ebook Downloader WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-04-01
CVE-2025-31897Arrow Custom Feed for Twitter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01
CVE-2025-31895ABC Notation WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01
CVE-2025-31894Ebook Downloader WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01
CVE-2025-31892WP Crowdfunding WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01Fix
CVE-2025-31891Gosign Posts Slider Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01
CVE-2025-31890Simple Map No Api WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01
CVE-2025-31889Extensions for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01
CVE-2025-31888WP Multi Store Locator WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31887MyBookProgress WordPress plugin broken access control4.3CNA v3.10.2%2025-04-01
CVE-2025-31886Social proof testimonials and reviews by Repuso WordPress plugin broken access control4.3CNA v3.10.2%2025-04-01Fix
CVE-2025-31885Hyperlink Group Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01Fix
CVE-2025-31884Norse Rune Oracle WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01Fix
CVE-2025-31883WebinarPress WordPress plugin cross-site scripting (XSS)4.8v3.10.2%2025-04-01Fix
CVE-2025-31882WPWebinarSystem WebinarPress missing authorization4.3CNA v3.10.3%2025-04-01
CVE-2025-31881Pearl WordPress plugin broken access control5.4CNA v3.10.4%2025-04-01Fix
CVE-2025-31880Pearl WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01Fix
CVE-2025-31879Barcode Generator for WooCommerce WordPress plugin settings Change vulnerability5.4CNA v3.10.3%2025-04-01Fix
CVE-2025-31878UPC/EAN/GTIN Code Generator WordPress plugin settings Change vulnerability5.4CNA v3.10.3%2025-04-01Fix
CVE-2025-31877RestroPress WordPress plugin broken access control4.3CNA v3.10.2%2025-04-01Fix
CVE-2025-31875FancyPost WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01
CVE-2025-31874WebberZone Snippetz WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01Fix
CVE-2025-31873SheetDB WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01Fix
CVE-2025-31872WP Clone any post type WordPress plugin broken access control5.3CNA v3.10.4%2025-04-01
CVE-2025-31871WP Clone any post type WordPress plugin open redirect4.7CNA v3.10.4%2025-04-01Fix
CVE-2025-31870WP AutoKeyword WordPress plugin arbitrary content deletion vulnerability5.4CNA v3.10.3%2025-04-01
CVE-2025-31869Black Widgets For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01
CVE-2025-31868JS Job Manager WordPress plugin broken access control5.3CNA v3.10.3%2025-04-01
CVE-2025-31867JS Job Manager WordPress plugin insecure direct object references (IDOR)5.4CNA v3.10.4%2025-04-01
CVE-2025-31866ShipDepot for WooCommerce WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01
CVE-2025-31865CartBoss WordPress plugin broken access control4.3CNA v3.10.3%2025-04-01Fix
CVE-2025-31864Beam me up Scotty Back to Top Button WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-04-01Exploit code
CVE-2025-31863Agency Toolkit WordPress plugin broken access control5.3CNA v3.10.4%2025-04-01Fix
CVE-2025-31862Job Board Manager WordPress plugin broken access control5.3CNA v3.10.3%2025-04-01
CVE-2025-31861Perfect Font Awesome Integration WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01Fix
CVE-2025-31860WP AdCenter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01Fix
CVE-2025-31859Feedbucket Website Feedback Tool WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-04-01Fix
CVE-2025-31857Directorist AddonsKit for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01Fix
CVE-2025-31856Export All Post Meta WordPress plugin broken access control4.3CNA v3.10.3%2025-04-01
CVE-2025-31855SMM API WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01
CVE-2025-31854Simple Sticky Add To Cart For WooCommerce WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01
CVE-2025-31853Smartarget Popup WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-04-01Fix
CVE-2025-31852Bulk Product Sync WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01Fix
CVE-2025-31851Beds24 Online Booking WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01Fix
CVE-2025-31850PDF Generator Addon for Elementor Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01Fix
CVE-2025-31849Nemesis All-in-One WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31848WordPress Adverts plugin broken access control5.3CNA v3.10.4%2025-04-01
CVE-2025-31847mFolio Lite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31846Theater for WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01Fix
CVE-2025-31845Theme Duplicator WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31844Magical Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01Fix
CVE-2025-31843OpenAI Tools for WordPress and WooCommerce plugin broken access control4.3CNA v3.10.4%2025-04-01
CVE-2025-31842Viral Loops WP Integration WordPress plugin sensitive data exposure5.3CNA v3.10.5%2025-04-01Fix
CVE-2025-31840Simple Fixed Notice WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31839Footer Contacts Bar WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31838Eventbee RSVP Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31837WP Proposals WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-01
CVE-2025-31836Review Manager WordPress plugin broken access control5.3CNA v3.10.4%2025-04-01
CVE-2025-31835WP Plugin Info Card WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-01Fix
CVE-2025-31834JobBoard Job listing WordPress plugin broken access control5.3CNA v3.10.5%2025-04-01
CVE-2025-31833JobBoard Job listing WordPress plugin insecure direct object references (IDOR)4.9CNA v3.10.6%2025-04-01
CVE-2025-31832ACF City Selector WordPress plugin sensitive data exposure5.3CNA v3.10.5%2025-04-01
CVE-2025-31831AtomChat WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01Fix
CVE-2025-31830Printus WordPress plugin broken access control4.3CNA v3.10.5%2025-04-01Fix
CVE-2025-31829ShopCred WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31828Easy!Appointments WordPress plugin cross-site request forgery (CSRF) to settings Change8.8v3.10.2%2025-04-01Fix
CVE-2025-31826Ni WooCommerce Cost Of Goods WordPress plugin broken access control5.4CNA v3.10.4%2025-04-01Fix
CVE-2025-31824WP Optin Wheel WordPress plugin server side request forgery (SSRF)5.4CNA v3.10.3%2025-04-01Fix
CVE-2025-31823WPoperation Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31822WordPress Simple HTML Sitemap plugin broken access control5.3CNA v3.10.6%2025-04-01Fix
CVE-2025-31821Integration of Zoho CRM and Contact Form 7 WordPress plugin open redirection4.7CNA v3.10.4%2025-04-01
CVE-2025-31820Automatic Featured Images from Videos WordPress plugin broken access control4.3CNA v3.10.3%2025-04-01Fix
CVE-2025-31819Nova Blocks by Pixelgrade WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01Fix
CVE-2025-31818ContentBot AI Writer WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01
CVE-2025-31817BlockWheels WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31816Mobile App Canvas WordPress plugin broken access control5.4CNA v3.10.4%2025-04-01Fix
CVE-2025-31815Design Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31814OwnerRez WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01Fix
CVE-2025-31813WPSHARE247 Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31812BuddyPress Members Only WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01Fix
CVE-2025-31811Planyo online reservation system WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31810Question Answer WordPress plugin broken access control5.3CNA v3.10.4%2025-04-01
CVE-2025-31809Labinator Content Types Duplicator WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31808SCSS WP Editor WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01Fix
CVE-2025-31807Product Notices for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31806Webling WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-01Fix
CVE-2025-31805Gutena Kit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01Fix
CVE-2025-31804Follow Us Badges WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31803Turisbook Booking System WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31802Shiptimize for WooCommerce WordPress plugin settings Change vulnerability5.4CNA v3.10.4%2025-04-01
CVE-2025-31801MX Time Zone Clocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01Fix
CVE-2025-31799Publitio WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01Fix
CVE-2025-31798Publitio WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01Fix
CVE-2025-31797Sprout Clients WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01Fix
CVE-2025-31796ElementsCSS Addons for Elementor WordPress plugin server side request forgery (SSRF)5.4CNA v3.10.3%2025-04-01
CVE-2025-31793Piotnet Forms WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-01
CVE-2025-31792Piotnet Forms WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-01
CVE-2025-31791Pin Generator WordPress plugin broken access control5.4CNA v3.10.4%2025-04-01Fix
CVE-2025-31790Posten WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31788smackcoders AIO Performance Profiler sensitive information in log files5.3CNA v3.10.5%2025-04-01
CVE-2025-31787Cue by AudioTheme.com WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01Fix
CVE-2025-31786Simple Icons WordPress plugin broken access control5.3CNA v3.10.5%2025-04-01
CVE-2025-31785Clearbit Reveal WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-04-01
CVE-2025-31784Embed Extended WordPress plugin Rudy Susanto cross-site request forgery4.3CNA v3.10.2%2025-04-01
CVE-2025-31783Leartes TRY Exchange Rates WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31782mb.YTPlayer WordPress plugin broken access control5.4CNA v3.10.4%2025-04-01
CVE-2025-31781Gift Cards for WooCommerce WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01
CVE-2025-31780Append Content WordPress plugin CSRF to settings Change6.5CNA v3.10.5%2025-04-01
CVE-2025-31779Query Wrangler WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-04-01Fix
CVE-2025-31778Donate Me WordPress plugin stored cross-site scripting6.5CNA v3.10.4%2025-04-01Fix
CVE-2025-31777Clockinator Lite WordPress plugin broken access control5.3CNA v3.10.4%2025-04-01Fix
CVE-2025-31776Uptime Robot WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31775Google SEO Pressor for Rich snippets WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31774Astra Security Suite WordPress plugin WebProtect.ai missing authorization5.3CNA v3.10.5%2025-04-01
CVE-2025-31773Ship Per Product WordPress plugin broken access control5.3CNA v3.10.6%2025-04-01
CVE-2025-31772WP Modal Popup with Cookie Integration WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-01Fix
CVE-2025-31771Team Members for Elementor Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31770Content Manager Light WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31769CLP Custom Login Page by NiteoThemes WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31767Post Custom Templates Lite WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31766PhotoShelter for Photographers Blog Feed WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31765GDPR Cookie Notice WordPress plugin broken access control5.3CNA v3.10.4%2025-04-01
CVE-2025-31764Cache control by Cacholong WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-01Fix
CVE-2025-31763Cache control by Cacholong WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31762Sheet2Site WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31761Hypotext WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31760SnapWidget Social Photo Feed Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31759Boo Recipes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31757BinaryCarpenter Free WooCommerce Product Table View missing authorization5.4CNA v3.10.4%2025-04-01
CVE-2025-31756TZ PlusGallery WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31755pCloud Backup WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01
CVE-2025-31754DobsonDev Shortcodes WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31753Advanced Speed Increaser WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-01
CVE-2025-31752Bulk Fields Editor WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01
CVE-2025-31751Breaking News WP WordPress plugin CSRF to settings Change6.5CNA v3.10.3%2025-04-01
CVE-2025-31750Breaking News WP WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-01
CVE-2025-31749HMH Footer Builder For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31748Opal Portfolio WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31747WP Chrono WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31745Subscription Form for Feedblitz WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31744Lightweight and Responsive Youtube Embed WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31743Lightweight and Responsive Youtube Embed WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31742Dima Take Action WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-01
CVE-2025-31741Easy Magazine WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31740News, Magazine and Blog Elements WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31738LeadQuizzes WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31737Client Showcase WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31735Footnotes for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31734Simple Post Expiration WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31733WP Sitemap WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31732GB Gallery Slideshow WordPress plugin broken access control4.3CNA v3.10.4%2025-04-01
CVE-2025-31731Author Bio Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31730Marketer Addons WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-01
CVE-2025-31628Sliced Invoices WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.4%2025-04-01
CVE-2025-31619Actionwear products sync WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-01Fix
CVE-2025-31612CBX Poll WordPress plugin PHP object injection9.8CNA v3.10.7%2025-04-01
CVE-2025-31594Auto scroll for reading WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-31580Ni WooCommerce Product Enquiry WordPress plugin broken access control7.5CNA v3.10.4%2025-04-01Fix
CVE-2025-31579WP AutoKeyword WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01
CVE-2025-31578Fonts Manager Custom Fonts WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-31571The Logo Slider WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-31568LeadLab by wiredminds WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-31564Ai Auto Tool Content Writing Assistant All in One WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-01Fix
CVE-2025-31563AI Search Bar WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-31561Ultimate Push Notifications WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-01Fix
CVE-2025-31560Salon booking system WordPress plugin privilege escalation7.2v3.10.6%2025-04-01Fix
CVE-2025-31553Advanced WooCommerce Product Sales Reporting WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01Fix
CVE-2025-31552RSVPMarker WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01Fix
CVE-2025-31551Salesmate Add-On for Gravity Forms WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01Fix
CVE-2025-31550WP-LESS WordPress plugin sensitive data exposure5.8CNA v3.10.4%2025-04-01Fix
CVE-2025-31548Ultimate Push Notifications WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-31537Bulk NoIndex and NoFollow Toolkit WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-31534Shopper WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01Fix
CVE-2025-31531History Log by click5 WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01
CVE-2025-31525WP Mobile Bottom Menu WordPress plugin broken access control4.3CNA v3.10.3%2025-04-01Fix
CVE-2025-31462CGM Event Calendar WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01
CVE-2025-31461NanoSupport WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01
CVE-2025-31455ralxz Limit Max IPs Per User DOM-based cross-site scripting7.1CNA v3.10.4%2025-04-01
CVE-2025-31454Delete Post Revision WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01
CVE-2025-31446WP Cleaner WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01
CVE-2025-31445Pages Order WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01
CVE-2025-31441WordPress Galleria plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01
CVE-2025-31431WP Bookmarks WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01
CVE-2025-31415WordPress YayExtra plugin broken access control7.6CNA v3.10.3%2025-04-01Fix
CVE-2025-31409Bridge Core WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01Fix
CVE-2025-31408Zoho Flow WordPress plugin broken access control4.3CNA v3.10.2%2025-04-01Fix
CVE-2025-31137Remix React Router Express adapter host header handling HTTP request smuggling7.5CNA v3.01.2%2025-04-01Exploit codeFix
CVE-2025-31135Go-Guerrilla SMTP daemon allows the PROXY command to be sent multiple times5.3CNA v3.10.4%2025-04-01Fix
CVE-2025-31132Raven allows remote code execution due to improper validation8.1CNA v3.10.6%2025-04-01Fix
CVE-2025-31131Path traversal allowing arbitrary read of files in YesWiki8.6CNA v3.15.5%2025-04-01NucleiExploit codeFix
CVE-2025-31121OpenEMR allows XSS in Patient Image feature7.0CNA v4.017.4%2025-04-01Fix
CVE-2025-31097Material Dashboard WordPress plugin local file inclusion8.1CNA v3.10.8%2025-04-01Fix
CVE-2025-31095Material Dashboard WordPress plugin privilege escalation9.8CNA v3.10.7%2025-04-01Fix
CVE-2025-31089Order Splitter for WooCommerce WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-01Fix
CVE-2025-31087Multiple Shipping And Billing Address For Woocommerce WordPress plugin PHP object injection9.8CNA v3.10.7%2025-04-01Fix
CVE-2025-31086Product Table by WBW WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-31085xili-language WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-31084Sunshine Photo Cart WordPress plugin PHP object injection9.8v3.10.7%2025-04-01Fix
CVE-2025-31082News and Blog Designer Pack WordPress plugin local file inclusion8.1CNA v3.10.8%2025-04-01Fix
CVE-2025-31081Enable Media Replace WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-31080HTML Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-31078Small Package Quotes Worldwide Express Edition WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-31074MDJM Event Management WordPress plugin PHP object injection8.8CNA v3.10.7%2025-04-01Fix
CVE-2025-31024RJ Quickcharts WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-01
CVE-2025-31001GTM Kit WordPress plugin sensitive data exposure7.5CNA v3.10.5%2025-04-01Fix
CVE-2025-30971XV Random Quotes WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01Fix
CVE-2025-30926King Addons for Elementor WordPress plugin broken access control4.3CNA v3.10.3%2025-04-01Fix
CVE-2025-30924Primer MyData for Woocommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30917SKU Generator for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30913Access Areas WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-30911rometheme RTMKit code injection9.9CNA v3.11.9%2025-04-01Exploit codeFix
CVE-2025-30910CM Download Manager WordPress plugin arbitrary file deletion8.6CNA v3.10.6%2025-04-01Fix
CVE-2025-30906Plugin Oficial Getnet para WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-30905Secure Copy Content Protection and Content Locking WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-30902AEC Kiosque WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30901JS Help Desk WordPress plugin local file inclusion8.1CNA v3.10.9%2025-04-01Fix
CVE-2025-30892WpTravelly WordPress plugin PHP object injection8.8CNA v3.10.7%2025-04-01Fix
CVE-2025-30886JS Help Desk WordPress plugin SQL injection10.0v3.10.5%2025-04-01Fix
CVE-2025-30882JS Help Desk WordPress plugin arbitrary file download7.5CNA v3.10.6%2025-04-01Fix
CVE-2025-30880JS Help Desk WordPress plugin broken access control7.5CNA v3.10.5%2025-04-01Fix
CVE-2025-30878JS Help Desk WordPress plugin arbitrary file deletion9.1v3.10.6%2025-04-01Fix
CVE-2025-30876Ads by WPQuads WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01Fix
CVE-2025-30870WP Travel Engine WordPress plugin local file inclusion9.8v3.10.8%2025-04-01Fix
CVE-2025-30869Image Wall WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30853ShortPixel Adaptive Images WordPress plugin broken authentication5.4CNA v3.10.4%2025-04-01Fix
CVE-2025-30852Oracle Cards Lite WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-30849Essential Real Estate WordPress plugin local file inclusion9.8v3.10.8%2025-04-01Fix
CVE-2025-30848Hostel WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30844Watu Quiz WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.4%2025-04-01Fix
CVE-2025-30841Countdown and Clock WordPress plugin remote code execution (RCE)9.9CNA v3.10.8%2025-04-01Fix
CVE-2025-30840xili-dictionary WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30837WooCommerce Fattureincloud WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30834Bit Assist WordPress plugin path traversal7.5CNA v3.10.5%2025-04-01Fix
CVE-2025-30827WP2LEADS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30825WPC Smart Linked Products WordPress plugin privilege escalation8.8CNA v3.10.5%2025-04-01Fix
CVE-2025-30808About Author WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30807Next-Cart Store to WooCommerce Migration WordPress plugin SQL injection9.3CNA v3.10.5%2025-04-01Fix
CVE-2025-30802Our Team Members WordPress plugin sensitive data exposure4.3CNA v3.10.4%2025-04-01Fix
CVE-2025-30798Better WishList API WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30797Greek Multi Tool WordPress plugin bigdrop.gr missing authorization7.5CNA v3.10.5%2025-04-01Fix
CVE-2025-30796The Ultimate WordPress Toolkit WP Extended plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30794Event Tickets WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01Fix
CVE-2025-30793Houzez Property Feed WordPress plugin arbitrary file download7.5CNA v3.10.6%2025-04-01Fix
CVE-2025-30782Subscribe to Download Lite WordPress plugin local file inclusion7.5CNA v3.10.8%2025-04-01Fix
CVE-2025-30778Vikas Ratudi VPSUForm reflected cross-site scripting7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-30774Quiz Maker WordPress plugin SQL injection9.8v3.10.4%2025-04-01Fix
CVE-2025-30676Apache OFBiz: Stored XSS6.1CISA ADP v3.167.6%2025-04-01Fix
CVE-2025-30673Sub::HandlesVia for Perl allows untrusted code to be included from the current working directory6.5CISA ADP v3.10.4%2025-04-01Fix
CVE-2025-30672Mite for Perl generates code with an untrusted search path6.5CISA ADP v3.10.4%2025-04-01Fix
CVE-2025-30622PostMash WordPress plugin SQL injection9.3CNA v3.10.4%2025-04-01
CVE-2025-30614Google Font Fix WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30613Nmedia MailChimp WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-01
CVE-2025-30607Quick Localization WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30594WordPress Include URL plugin arbitrary file download6.5CNA v3.10.5%2025-04-01
CVE-2025-30589Flickr set slideshows WordPress plugin SQL injection8.5CNA v3.10.4%2025-04-01
CVE-2025-30580DigiWidgets Image Editor WordPress plugin remote code execution (RCE)10.0CNA v3.10.7%2025-04-01
CVE-2025-30579Pesapal Gateway for Woocommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30563Tidekey WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30559Kento WordPress Stats plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30554Frizzly WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-01Fix
CVE-2025-30548Advanced Post Search WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30547WP Cards WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30544OK Poster Group WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30520Breezing Forms WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-01
CVE-2025-30356nasa CryptoLib heap buffer overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`9.3CNA v4.00.7%2025-04-01
CVE-2025-30354Bruno ignores Safe-Mode in Asserts expressions8.7CNA v4.00.4%2025-04-01Fix
CVE-2025-30224MyDumper arbitrary file read issue5.1CNA v4.00.7%2025-04-01Fix
CVE-2025-30210Bruno XSS on Environment Name8.7CNA v4.00.4%2025-04-01Fix
CVE-2025-30177Apache Camel: Camel-Undertow message header injection via Improper Filtering6.5CISA ADP v3.11.3%2025-04-01Fix
CVE-2025-30065Apache Parquet Avro module vulnerable to arbitrary code execution10.0CNA v4.043.6%2025-04-01Exploit codeFix
CVE-2025-29868Apache Answer: Using externally referenced images can leak user privacy6.5CISA ADP v3.11.0%2025-04-01Fix
CVE-2025-29208Codezips Gym Management System SQL injection6.5CISA ADP v3.10.3%2025-04-01
CVE-2025-29070lcms2 smooth2 function heap buffer overflow7.5CISA ADP v3.11.0%2025-04-01Fix
CVE-2025-29069lcms2 UnrollChunkyBytes function heap buffer overflow7.3CISA ADP v3.10.4%2025-04-01
CVE-2025-29049MathLive's Lack of Escaping of HTML allows for XSS6.3CISA ADP v3.10.6%2025-04-01Fix
CVE-2025-29036hackathon-starter user.js privilege escalation5.9CISA ADP v3.10.3%2025-04-01
CVE-2025-29033BambooHR Build /saml/index.php parameter privilege escalation7.3CISA ADP v3.10.6%2025-04-01
CVE-2025-28398D-Link DI-8100 buffer overflow7.1CISA ADP v3.10.6%2025-04-01
CVE-2025-28395D-Link DI-8100 buffer overflow7.1CISA ADP v3.10.6%2025-04-01
CVE-2025-28132Nagios Network Analyzer insufficient session expiration4.6CISA ADP v3.10.4%2025-04-01Fix
CVE-2025-28131Nagios Network Analyzer missing authorization4.6CISA ADP v3.10.4%2025-04-01Fix
CVE-2025-27829Stormshield Network Security multicast routing denial of service7.3CISA ADP v3.10.3%2025-04-01
CVE-2025-27427Apache ActiveMQ Artemis User without Create Address Permissions can Modify Address Routing-Type2.3CNA v4.00.6%2025-04-01Fix
CVE-2025-27130Welcart e-Commerce deserialization of untrusted data8.8v3.10.4%2025-04-01Fix
CVE-2025-26056Infinxt iEdge A command injection5.4CISA ADP v3.11.1%2025-04-01
CVE-2025-26055Infinxt iEdge An OS command injection6.5CISA ADP v3.11.1%2025-04-01Exploit code
CVE-2025-26054Infinxt iEdge 100 LAN configuration description field cross-site scripting5.4CISA ADP v3.10.4%2025-04-01Exploit code
CVE-2025-25041Arbitrary file overwrite in HPE Aruba Networking Virtual Intranet Access Microsoft Windows client5.5CNA v3.10.1%2025-04-01
CVE-2025-22277Vitepos WordPress plugin broken authentication8.8CNA v3.10.5%2025-04-01Fix
CVE-2025-22231VMware Aria Operations updates address a local privilege escalation vulnerability7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21986Linux kernel switchdev notification chain improper locking5.5v3.10.1%2025-04-01Fix
CVE-2025-21985Linux kernel AMD display HPO encoder mapping out-of-bounds read7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21984Linux kernel userfaultfd page migration race condition7.8CNA v3.10.1%2025-04-01Fix
CVE-2025-21983Linux kernel kvfree_rcu memory reclaim vulnerability7.8v3.10.2%2025-04-01Fix
CVE-2025-21982Linux kernel npcm8xx GPIO pin control driver null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21981Linux kernel ice Ethernet driver aRFS memory leak5.5v3.10.2%2025-04-01Fix
CVE-2025-21980Linux kernel sched null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21979Linux kernel cfg80211 wiphy work handling use-after-free7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21978Linux kernel Hyper-V DRM driver memory leak5.5v3.10.2%2025-04-01Fix
CVE-2025-21977Linux kernel hyperv_fb framebuffer driver denial of service5.5v3.10.2%2025-04-01Fix
CVE-2025-21976Linux kernel hyperv_fb framebuffer driver vulnerability7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21975Linux kernel mlx5 flow steering null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21974Linux kernel bnxt Ethernet driver vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21973Linux kernel bnxt Ethernet driver vulnerability7.1v3.10.2%2025-04-01Fix
CVE-2025-21972Linux kernel MCTP packet reassembly memory leak8.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21971Linux kernel net_sched traffic scheduler infinite loop7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21970Linux kernel mlx5 bridge LAG handling null pointer dereference7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21969Linux kernel Bluetooth L2CAP command sending use-after-free8.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21968Linux kernel AMD display HDCP handling use-after-free7.8v3.10.2%2025-04-01Fix
CVE-2025-21967Linux kernel ksmbd work structure cleanup use-after-free8.8CNA v3.10.4%2025-04-01Fix
CVE-2025-21966Linux kernel dm-flakey memory corruption7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21965Linux kernel sched_ext CPU selection null pointer dereference7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21964Linux kernel CIFS acregmax mount option parsing integer overflow5.5v3.10.2%2025-04-01Fix
CVE-2025-21963Linux kernel CIFS acdirmax mount option parsing integer overflow5.5v3.10.2%2025-04-01Fix
CVE-2025-21962Linux kernel CIFS closetimeo mount option parsing integer overflow5.5v3.10.2%2025-04-01Fix
CVE-2025-21961Linux kernel bnxt Ethernet XDP packet handling vulnerability7.5CNA v3.10.5%2025-04-01Fix
CVE-2025-21960Linux kernel bnxt Ethernet XDP checksum handling vulnerability7.5CNA v3.10.5%2025-04-01Fix
CVE-2025-21959Linux kernel netfilter connection count tracking vulnerability7.3CNA v3.10.4%2025-04-01Fix
CVE-2025-21958Linux kernel time-of-check time-of-use race condition7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21957Linux kernel qla1280 SCSI driver debug logging null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21956In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalized_pix_clk when color depth = 14 [WHY & HOW] A warning message "WARNING: CPU: 4 PID: 459 at ... /dc_resource.c:3397 calculate_phy_pix_clks+0xef/0x100 [amdgpu]" occurs because the display_color_depth5.5v3.10.2%2025-04-01Fix
CVE-2025-21955Linux kernel ksmbd oplock break notification vulnerability8.8CNA v3.10.5%2025-04-01Fix
CVE-2025-21954Linux kernel netmem transmit path memory leak9.8CNA v3.10.5%2025-04-01Fix
CVE-2025-21953Linux kernel mana null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21952Linux kernel Corsair Void HID driver vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21951Linux kernel MHI PCI generic bus driver deadlock5.5v3.10.2%2025-04-01Fix
CVE-2025-21950Linux kernel ACRN hypervisor HSM driver information disclosure7.1v3.10.2%2025-04-01Fix
CVE-2025-21949Linux kernel LoongArch hugetlb mmap handling denial of service7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21948Linux kernel appleir null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21947Linux kernel ksmbd IPC request handling race condition8.1CNA v3.10.4%2025-04-01Fix
CVE-2025-21946Linux kernel ksmbd security descriptor parser out-of-bounds read8.8CNA v3.10.5%2025-04-01Fix
CVE-2025-21945Linux kernel ksmbd SMB2 lock handling use-after-free8.8CNA v3.10.5%2025-04-01Fix
CVE-2025-21944Linux kernel ksmbd SMB2 lock handling vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21943Linux kernel GPIO aggregator driver race condition4.7v3.10.2%2025-04-01Fix
CVE-2025-21942Linux kernel Btrfs zoned extent locking vulnerability5.5NVD v3.10.2%2025-04-01Fix
CVE-2025-21941Linux kernel AMD display pipe scaling null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21940Linux kernel AMDKFD queue management null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21939Linux kernel Xe graphics driver HMM page handling null pointer dereference7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21938Linux kernel mptcp race condition7.5CNA v3.10.4%2025-04-01Fix
CVE-2025-21937Linux kernel Bluetooth management remote name event null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21936Linux kernel Bluetooth management device connected event null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21935In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rio_add_net() in rio_scan_alloc_net() The return value of rio_add_net() should be checked. If it fails, put_device() should be called to free the memory and give up the reference initialized in rio_add_net(5.5v3.10.2%2025-04-01Fix
CVE-2025-21934Linux kernel rapidio use-after-free7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21933Linux kernel ARM page table migration handling null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21932Linux kernel VMA merge handling vulnerability7.0CNA v3.10.2%2025-04-01Fix
CVE-2025-21931Linux kernel memory hotplug hwpoison handling vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21930Linux kernel iwlwifi firmware debug interface vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21929Linux kernel intel-ish-hid use-after-free7.8v3.10.2%2025-04-01Fix
CVE-2025-21928Linux kernel intel-ish-hid use-after-free7.8v3.10.2%2025-04-01Fix
CVE-2025-21927Linux kernel NVMe over TCP PDU receive out-of-bounds write9.8CNA v3.10.5%2025-04-01Fix
CVE-2025-21926Linux kernel UDP GSO segmentation vulnerability7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21925Linux kernel llc crash5.5NVD v3.10.2%2025-04-01Fix
CVE-2025-21924Linux kernel HNS3 PTP clock driver vulnerability7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21923Linux kernel Steam controller HID driver use-after-free7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21922Linux kernel PPP BPF packet filter vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21921Linux kernel ethtool netlink interface null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21920Linux kernel VLAN device creation out-of-bounds read7.1v3.10.2%2025-04-01Fix
CVE-2025-21919Linux kernel CFS scheduler runqueue list out-of-bounds write7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21918Linux kernel USB Type-C UCSI driver null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21917Linux kernel Renesas USBHS hotplug handling null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21916Linux kernel cxacru USB ATM driver vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21915Linux kernel CDX bus driver_override use-after-free7.0CNA v3.10.2%2025-04-01Fix
CVE-2025-21914Linux kernel SLIMbus messaging out-of-bounds write7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21913In the Linux kernel, the following vulnerability has been resolved: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() Xen doesn't offer MSR_FAM10H_MMIO_CONF_BASE to all guests. This results in the following warning: unchecked MSR access error: RDMSR from 0xc0010058 at rIP: 0xffffffff8105.5NVD v3.10.2%2025-04-01Fix
CVE-2025-21912Linux kernel R-Car GPIO driver improper locking5.5v3.10.2%2025-04-01Fix
CVE-2025-21911Linux kernel PowerVR GPU fence release deadlock5.5v3.10.2%2025-04-01Fix
CVE-2025-21910Linux kernel cfg80211 regulatory hints vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21909Linux kernel nl80211 monitor interface flags race condition5.5v3.10.2%2025-04-01Fix
CVE-2025-21908Linux kernel NFS folio writeback deadlock5.5v3.10.2%2025-04-01Fix
CVE-2025-21907Linux kernel hwpoison folio unmap handling vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21906Linux kernel iwlwifi remain-on-channel handling improper initialization7.6CNA v3.10.2%2025-04-01Fix
CVE-2025-21905Linux kernel iwlwifi firmware string handling out-of-bounds read7.1v3.10.2%2025-04-01Fix
CVE-2025-21904Linux kernel caif_virtio driver null pointer dereference5.5v3.10.2%2025-04-01Fix
CVE-2025-21903Linux kernel MCTP I3C driver vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21902Linux kernel ACPI UCSI driver vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21901Linux kernel bnxt_re RDMA driver null pointer dereference7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21900Linux kernel NFSv4 state recovery deadlock7.5CNA v3.10.3%2025-04-01Fix
CVE-2025-21899Linux kernel ftrace histogram triggers null pointer dereference7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21898Linux kernel ftrace function stats divide by zero5.5v3.10.2%2025-04-01Fix
CVE-2025-21897Linux kernel sched_ext scheduler improper locking5.5v3.10.2%2025-04-01Fix
CVE-2025-21896Linux kernel FUSE readahead use-after-free7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-21895Linux kernel PMU context list ordering race condition4.7v3.10.1%2025-04-01Fix
CVE-2025-21894Linux kernel enetc virtual function timestamping vulnerability5.5v3.10.2%2025-04-01Fix
CVE-2025-21384Microsoft Azure Health Bot elevation of privilege8.3CNA v3.10.7%2025-04-01Fix
CVE-2025-3096Clinics Patient Management System SQL injection9.3CNA v4.01.5%2025-04-01MetasploitExploit codeKCV
CVE-2025-3085MongoDB Server certificate revocation checking vulnerability8.1CNA v3.10.3%2025-04-01Fix
CVE-2025-3084MongoDB Server may crash due to improper validation of explain command6.5CNA v3.10.4%2025-04-01Fix
CVE-2025-3083Malformed MongoDB wire protocol messages may cause mongos to crash7.5CNA v3.10.4%2025-04-01Fix
CVE-2025-3082MongoDB Server user may override a view's collation and gain unauthorized access to underlying data3.1CNA v3.10.2%2025-04-01Fix
CVE-2025-3051Linux::Statm::Tiny for Perl allows untrusted code to be included from the current working directory6.5CISA ADP v3.10.4%2025-04-01Fix
CVE-2025-3045Oretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php SQL injection9.8v3.10.6%2025-04-01
CVE-2025-3043GuoMinJim PersonManage login preHandle path traversal6.9CNA v4.00.7%2025-04-01
CVE-2025-3042Project Worlds Online Time Table Generator updateprofile.php unrestricted upload9.8v3.10.5%2025-04-01
CVE-2025-3041Project Worlds Online Time Table Generator updatestudent.php unrestricted upload9.8v3.10.5%2025-04-01
CVE-2025-3035Mozilla Firefox tab title disclosure across pages when using AI chatbot5.3CISA ADP v3.10.3%2025-04-01Fix
CVE-2025-3034Mozilla memory safety bugs fixed in Firefox 137 and Thunderbird 1378.1CISA ADP v3.10.5%2025-04-01Fix
CVE-2025-3033Mozilla Firefox opening local .url files could lead to another file being opened7.7CISA ADP v3.10.2%2025-04-01Fix
CVE-2025-3032Mozilla Firefox leaking file descriptors from the fork server7.4CISA ADP v3.10.4%2025-04-01Fix
CVE-2025-3031Mozilla Firefox JIT optimization bug with different stack slot sizes6.5CISA ADP v3.10.3%2025-04-01Fix
CVE-2025-3030Mozilla memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR, and Thunderbird8.1CISA ADP v3.10.5%2025-04-01Fix
CVE-2025-3029Mozilla Firefox URL Bar spoofing via non-BMP Unicode characters7.3CISA ADP v3.10.3%2025-04-01Fix
CVE-2025-3028Mozilla Firefox use-after-free triggered by XSLTProcessor6.5CISA ADP v3.10.9%2025-04-01Fix
CVE-2025-2906Contempo Real Estate Core WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-01Fix
CVE-2025-2891WP Pro Real Estate 7 WordPress theme authenticated (Custom) arbitrary file upload8.8CNA v3.10.7%2025-04-01Fix
CVE-2025-2237WP RealEstate WordPress plugin unauthenticated privilege escalation via process_register9.8CNA v3.10.5%2025-04-01Fix
CVE-2025-2048Lana Downloads Manager WordPress plugin Admin+ arbitrary file download via path traversal4.1CISA ADP v3.10.5%2025-04-01Fix
CVE-2025-2008Import Export Suite for CSV and XML Datafeed WordPress plugin arbitrary file upload8.8CNA v3.11.2%2025-04-01Fix
CVE-2025-2007Import Export Suite for CSV and XML Datafeed WordPress plugin arbitrary file deletion8.1CNA v3.11.2%2025-04-01Fix
CVE-2025-1986Gutentor WordPress plugin Admin+ SQL injection4.1CISA ADP v3.10.4%2025-04-01Fix
CVE-2025-1665Avada Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-04-01Fix
CVE-2025-1660Autodesk Navisworks Freedom DWFX File Parsing memory corruption7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-1659Autodesk Navisworks Freedom DWFX File Parsing out-of-bounds read7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-1658Autodesk Navisworks Freedom DWFX File Parsing out-of-bounds read7.8CNA v3.10.2%2025-04-01Fix
CVE-2025-1534Payara Platform Payara Server cross-site scripting (Stored)6.8CNA v4.00.3%2025-04-01Fix
CVE-2025-1512PowerPack Elementor Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-01Fix
CVE-2025-1267Groundhogg WordPress plugin stored cross-site scripting5.5CNA v3.10.3%2025-04-01Fix
CVE-2025-0418Valmet DNA user passwords in plain text5.2CNA v4.00.2%2025-04-01
CVE-2025-0417Valmet DNA Lack of protection against brute force attacks7.0CNA v4.00.2%2025-04-01
CVE-2025-0416Valmet DNA local privilege escalation through insecure DCOM configuration8.9CNA v4.00.2%2025-04-01