# CVEs published 2025-10-29

158 CVEs were published on October 29, 2025: 8 critical, 50 high. Days are UTC.

- [CVE-2025-62257](https://cve.now/CVE-2025-62257.md): Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1… (CVSS 6.3, Liferay Portal · Liferay DXP +1)
- [CVE-2025-12466](https://cve.now/CVE-2025-12466.md): Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114 (CVSS 7.5, Drupal Simple OAuth (OAuth2) & OpenID Connect · drupal/simp…)
- [CVE-2025-12083](https://cve.now/CVE-2025-12083.md): CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113 (CVSS 6.1, Drupal CivicTheme Design System · drupal/civictheme)
- [CVE-2025-12082](https://cve.now/CVE-2025-12082.md): CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112 (CVSS 7.5, Drupal CivicTheme Design System · drupal/civictheme)
- [CVE-2025-10929](https://cve.now/CVE-2025-10929.md): Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111 (CVSS 5.3, Drupal Reverse Proxy Header · drupal/reverse\_proxy\_header)
- [CVE-2025-10930](https://cve.now/CVE-2025-10930.md): Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110 (CVSS 6.5, Drupal Currency · drupal/currency)
- [CVE-2025-10931](https://cve.now/CVE-2025-10931.md): Umami Analytics - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-109 (CVSS 3.8, Drupal Umami Analytics · drupal/umami\_analytics)
- [CVE-2025-10928](https://cve.now/CVE-2025-10928.md): Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-108 (CVSS 6.3, Drupal Access code · drupal/access\_code)
- [CVE-2025-10927](https://cve.now/CVE-2025-10927.md): Plausible tracking - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-107 (CVSS 6.1, Drupal Plausible tracking · drupal/plausible\_tracking)
- [CVE-2025-10926](https://cve.now/CVE-2025-10926.md): JSON Field - Critical - Cross Site Scripting - SA-CONTRIB-2025-106 (CVSS 6.1, Drupal JSON Field · drupal/json\_field)
- [CVE-2025-9954](https://cve.now/CVE-2025-9954.md): Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105 (CVSS 7.5, Drupal Acquia DAM · drupal/acquia\_dam)
- [CVE-2025-54549](https://cve.now/CVE-2025-54549.md): Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO (CVSS 5.9, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-54548](https://cve.now/CVE-2025-54548.md): On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes) (CVSS 4.3, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-54547](https://cve.now/CVE-2025-54547.md): On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the… (CVSS 5.3, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-54546](https://cve.now/CVE-2025-54546.md): On affected platforms, restricted users could use SSH port forwarding to access host-internal services (CVSS 7.5, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-54545](https://cve.now/CVE-2025-54545.md): On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges. (CVSS 7.8, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-61724](https://cve.now/CVE-2025-61724.md): Excessive CPU consumption in Reader.ReadResponse in net/textproto (CVSS 5.3, Go standard library net/textproto · stdlib)
- [CVE-2025-58183](https://cve.now/CVE-2025-58183.md): Unbounded allocation when parsing GNU sparse map in archive/tar (CVSS 4.3, Go standard library archive/tar · stdlib)
- [CVE-2025-58188](https://cve.now/CVE-2025-58188.md): Panic when validating certificates with DSA public keys in crypto/x509 (CVSS 7.5, Go standard library crypto/x509 · stdlib)
- [CVE-2025-58186](https://cve.now/CVE-2025-58186.md): Lack of limit when parsing cookies can cause memory exhaustion in net/http (CVSS 5.3, Go standard library net/http · stdlib)
- [CVE-2025-58185](https://cve.now/CVE-2025-58185.md): Parsing DER payload can cause memory exhaustion in encoding/asn1 (CVSS 5.3, Go standard library encoding/asn1 · stdlib)
- [CVE-2025-47912](https://cve.now/CVE-2025-47912.md): Insufficient validation of bracketed IPv6 hostnames in net/url (CVSS 5.3, Go standard library net/url · stdlib)
- [CVE-2025-61723](https://cve.now/CVE-2025-61723.md): Quadratic complexity when parsing some invalid inputs in encoding/pem (CVSS 7.5, Go standard library encoding/pem · stdlib)
- [CVE-2025-58189](https://cve.now/CVE-2025-58189.md): ALPN negotiation error contains attacker controlled information in crypto/tls (CVSS 5.3, Go standard library crypto/tls · stdlib)
- [CVE-2025-58187](https://cve.now/CVE-2025-58187.md): Quadratic complexity when checking name constraints in crypto/x509 (CVSS 7.5, Go standard library crypto/x509 · stdlib)
- [CVE-2025-61725](https://cve.now/CVE-2025-61725.md): Excessive CPU consumption in ParseAddress in net/mail (CVSS 7.5, Go standard library net/mail · stdlib)
- [CVE-2025-61959](https://cve.now/CVE-2025-61959.md): Vertikal Systems Hospital Manager Backend Services Generation of Error Message Containing Sensitive Information (CVSS 6.9, Vertikal Systems Hospital Manager Backend Services)
- [CVE-2025-54459](https://cve.now/CVE-2025-54459.md): Vertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVSS 8.7, Vertikal Systems Hospital Manager Backend Services)
- [CVE-2025-10934](https://cve.now/CVE-2025-10934.md): GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-11465](https://cve.now/CVE-2025-11465.md): Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Ashlar-Vellum Cobalt)
- [CVE-2025-11464](https://cve.now/CVE-2025-11464.md): Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Ashlar-Vellum Cobalt)
- [CVE-2025-11463](https://cve.now/CVE-2025-11463.md): Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Ashlar-Vellum Cobalt)
- [CVE-2025-11466](https://cve.now/CVE-2025-11466.md): Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability (CVSS 4.9, Allegra)
- [CVE-2025-11200](https://cve.now/CVE-2025-11200.md): MLflow Weak Password Requirements Authentication Bypass Vulnerability (CVSS 8.1, MLflow)
- [CVE-2025-11201](https://cve.now/CVE-2025-11201.md): MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability (CVSS 8.1, MLflow)
- [CVE-2025-11202](https://cve.now/CVE-2025-11202.md): win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability (CVSS 9.8, win-cli-mcp-server)
- [CVE-2025-9870](https://cve.now/CVE-2025-9870.md): Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Razer Synapse)
- [CVE-2025-9871](https://cve.now/CVE-2025-9871.md): Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Razer Synapse)
- [CVE-2025-9869](https://cve.now/CVE-2025-9869.md): Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Razer Synapse)
- [CVE-2025-11203](https://cve.now/CVE-2025-11203.md): LiteLLM Information health API\_KEY Information Disclosure Vulnerability (CVSS 3.5, LiteLLM)
- [CVE-2025-10925](https://cve.now/CVE-2025-10925.md): GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10924](https://cve.now/CVE-2025-10924.md): GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10923](https://cve.now/CVE-2025-10923.md): GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10922](https://cve.now/CVE-2025-10922.md): GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10921](https://cve.now/CVE-2025-10921.md): GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10920](https://cve.now/CVE-2025-10920.md): GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-64104](https://cve.now/CVE-2025-64104.md): LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore (CVSS 7.3, langchain-ai langgraph · langgraph-checkpoint-sqlite)
- [CVE-2025-64103](https://cve.now/CVE-2025-64103.md): Zitadel Bypass Second Authentication Factor (CVSS 8.7, zitadel · github.com/zitadel/zitadel +1)
- [CVE-2018-25120](https://cve.now/CVE-2018-25120.md): D-Link DNS-343 ShareCenter \<= 1.05 Command Injection via /goform/Mail\_Test (CVSS 9.3, D-Link DNS-343 ShareCenter)
- [CVE-2025-64102](https://cve.now/CVE-2025-64102.md): Zitadel allows brute-forcing authentication factors (CVSS 7.7, zitadel · github.com/zitadel/zitadel/v2 +1)
- [CVE-2025-64101](https://cve.now/CVE-2025-64101.md): ZITADEL Vulnerable to Account Takeover via Malicious Forwarded Header Injection (CVSS 8.1, zitadel · github.com/zitadel/zitadel/v2 +1)
- [CVE-2025-11232](https://cve.now/CVE-2025-11232.md): Invalid characters cause assert (CVSS 7.5, ISC Kea)
- [CVE-2025-64100](https://cve.now/CVE-2025-64100.md): CKAN Vulnerable to Session Cookie Fixation (CVSS 6.1, ckan)
- [CVE-2025-62797](https://cve.now/CVE-2025-62797.md): CSRF in FluxCP account endpoints allows account takeover / state-changing actions (CVSS 8.6, rathena FluxCP)
- [CVE-2025-1549](https://cve.now/CVE-2025-1549.md): WatchGuard Mobile VPN with SSL Local Privilege Escallation (CVSS 6.3, WatchGuard Mobile VPN with SSL Client)
- [CVE-2025-12479](https://cve.now/CVE-2025-12479.md): Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-62792](https://cve.now/CVE-2025-62792.md): Wazuh vulnerable to Heap-based Buffer Over-read in w\_expression\_match (CVSS 6.9, wazuh)
- [CVE-2025-62791](https://cve.now/CVE-2025-62791.md): Wazuh vulnerable to NULL pointer dereference in DecodeCiscat (CVSS 6.9, wazuh)
- [CVE-2025-62790](https://cve.now/CVE-2025-62790.md): Wazuh vulnerable to NULL pointer dereference in fim\_fetch\_attributes\_state (CVSS 6.9, wazuh)
- [CVE-2025-62789](https://cve.now/CVE-2025-62789.md): Wazuh vulnerable to NULL pointer dereference in fim\_alert line 712 (CVSS 6.9, wazuh)
- [CVE-2025-62788](https://cve.now/CVE-2025-62788.md): Wazuh Vulnerable to Heap Use After Free in w\_copy\_event\_for\_log (CVSS 6.3, wazuh)
- [CVE-2025-12478](https://cve.now/CVE-2025-12478.md): Non-Compliant TLS Configuration (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-12477](https://cve.now/CVE-2025-12477.md): Server Version Disclosure (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-12476](https://cve.now/CVE-2025-12476.md): Resource Lacking AuthN (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-62787](https://cve.now/CVE-2025-62787.md): Wazuh Vulnerable to Heap-based Buffer Over-read in DecodeWinevt (CVSS 2.1, wazuh)
- [CVE-2025-62786](https://cve.now/CVE-2025-62786.md): Wazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode\_win\_permissions (CVSS 6.3, wazuh)
- [CVE-2025-62785](https://cve.now/CVE-2025-62785.md): Wazuh fillData NULL pointer dereference causes analysisd crash (CVSS 6.9, wazuh)
- [CVE-2025-12148](https://cve.now/CVE-2025-12148.md): Unauthorized access to fields protected by Field Masking (FM) for fields of type IP (CVSS 6.0, floragunn Search Guard FLX)
- [CVE-2024-14012](https://cve.now/CVE-2024-14012.md): Potential Privilege Escalation in Revenera InstallShield 2023 R1 (CVSS 7.3, Revenera InstallShield)
- [CVE-2025-12147](https://cve.now/CVE-2025-12147.md): Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object (CVSS 6.0, floragunn Search Guard FLX)
- [CVE-2025-54384](https://cve.now/CVE-2025-54384.md): CKAN stored XSS vulnerability in Markdown description fields (CVSS 6.3, ckan)
- [CVE-2024-58269](https://cve.now/CVE-2024-58269.md): Rancher exposes sensitive information through audit logs (CVSS 4.3, SUSE rancher · github.com/rancher/rancher)
- [CVE-2023-32199](https://cve.now/CVE-2023-32199.md): Rancher user retains access to clusters despite Global Role removal (CVSS 4.3, SUSE rancher · github.com/rancher/rancher)
- [CVE-2025-10932](https://cve.now/CVE-2025-10932.md): AS2 module allows uncontrolled file uploads (CVSS 8.2, Progress MOVEit Transfer)
- [CVE-2023-7324](https://cve.now/CVE-2023-7324.md): scsi: ses: Fix possible addl\_desc\_ptr out-of-bounds accesses (CVSS 8.1, Linux)
- [CVE-2025-40085](https://cve.now/CVE-2025-40085.md): ALSA: usb-audio: Fix NULL pointer deference in try\_to\_register\_card (no CVSS, Linux)
- [CVE-2025-40084](https://cve.now/CVE-2025-40084.md): ksmbd: transport\_ipc: validate payload size before reading handle (CVSS 7.1, Linux)
- [CVE-2025-40083](https://cve.now/CVE-2025-40083.md): net/sched: sch\_qfq: Fix null-deref in agg\_dequeue (no CVSS, Linux)
- [CVE-2025-64150](https://cve.now/CVE-2025-64150.md): A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect… (CVSS 5.4, Jenkins Project Jenkins Publish to Bitbucket Plugin · org.j…)
- [CVE-2025-64149](https://cve.now/CVE-2025-64149.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an… (CVSS 5.4, Jenkins Project Jenkins Publish to Bitbucket Plugin · org.j…)
- [CVE-2025-64148](https://cve.now/CVE-2025-64148.md): A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to… (CVSS 4.3, Jenkins Project Jenkins Publish to Bitbucket Plugin · org.j…)
- [CVE-2025-64147](https://cve.now/CVE-2025-64147.md): Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for… (CVSS 4.3, Jenkins Project Jenkins Curseforge Publisher Plugin · org.j…)
- [CVE-2025-64146](https://cve.now/CVE-2025-64146.md): Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be… (CVSS 4.3, Jenkins Project Jenkins Curseforge Publisher Plugin · org.j…)
- [CVE-2025-64145](https://cve.now/CVE-2025-64145.md): Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for… (CVSS 4.3, Jenkins Project Jenkins ByteGuard Build Actions Plugin · io…)
- [CVE-2025-64144](https://cve.now/CVE-2025-64144.md): Jenkins ByteGuard Build Actions Plugin 1.0 stores API tokens unencrypted in job config.xml files on the Jenkins controller where they can… (CVSS 4.3, Jenkins Project Jenkins ByteGuard Build Actions Plugin · io…)
- [CVE-2025-64143](https://cve.now/CVE-2025-64143.md): Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins… (CVSS 4.3, Jenkins Project Jenkins OpenShift Pipeline Plugin · com.ope…)
- [CVE-2025-64142](https://cve.now/CVE-2025-64142.md): A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect… (CVSS 4.3, Jenkins Project Jenkins Nexus Task Runner Plugin · org.jenk…)
- [CVE-2025-64141](https://cve.now/CVE-2025-64141.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an… (CVSS 4.3, Jenkins Project Jenkins Nexus Task Runner Plugin · org.jenk…)
- [CVE-2025-64140](https://cve.now/CVE-2025-64140.md): Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with… (CVSS 8.8, Jenkins Project Jenkins Azure CLI Plugin · org.jenkins-ci.p…)
- [CVE-2025-64139](https://cve.now/CVE-2025-64139.md): A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to… (CVSS 4.3, Jenkins Project Jenkins Start Windocks Containers Plugin ·…)
- [CVE-2025-64138](https://cve.now/CVE-2025-64138.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect… (CVSS 4.3, Jenkins Project Jenkins Start Windocks Containers Plugin ·…)
- [CVE-2025-64137](https://cve.now/CVE-2025-64137.md): A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an… (CVSS 4.3, Jenkins Project Jenkins Themis Plugin · org.jenkins-ci.plug…)
- [CVE-2025-64136](https://cve.now/CVE-2025-64136.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an… (CVSS 4.3, Jenkins Project Jenkins Themis Plugin · org.jenkins-ci.plug…)
- [CVE-2025-64135](https://cve.now/CVE-2025-64135.md): Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb\_8 and earlier sets the Java system property… (CVSS 5.9, Jenkins Project Jenkins Eggplant Runner Plugin · io.jenkins…)
- [CVE-2025-64134](https://cve.now/CVE-2025-64134.md): Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to… (CVSS 7.1, Jenkins Project Jenkins JDepend Plugin · org.jenkins-ci.plu…)
- [CVE-2025-64133](https://cve.now/CVE-2025-64133.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows… (CVSS 5.4, Jenkins Project Jenkins Extensible Choice Parameter Plugin…)
- [CVE-2025-64132](https://cve.now/CVE-2025-64132.md): Jenkins MCP Server Plugin 0.84.v50ca\_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to… (CVSS 5.4, Jenkins Project Jenkins MCP Server Plugin · io.jenkins.plug…)
- [CVE-2025-64131](https://cve.now/CVE-2025-64131.md): Jenkins SAML Plugin 4.583.vc68232f7018a\_ and earlier does not implement a replay cache, allowing attackers able to obtain information… (CVSS 7.5, Jenkins Project Jenkins SAML Plugin · org.jenkins-ci.plugin…)
- [CVE-2025-11587](https://cve.now/CVE-2025-11587.md): Call Now Button \<= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update (CVSS 4.3, jgrietveld Call Now Button – The #1 Click to Call Button fo…)
- [CVE-2025-11632](https://cve.now/CVE-2025-11632.md): Call Now Button \<= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions (CVSS 4.3, jgrietveld Call Now Button – The #1 Click to Call Button fo…)
- [CVE-2025-12142](https://cve.now/CVE-2025-12142.md): BSS(Block Started by Symbol) Memory Corruption Vulnerability (CVSS 6.9, ABB Terra AC wallbox)
- [CVE-2025-12461](https://cve.now/CVE-2025-12461.md): Unprotected access to parts of the application in Epsilon RH by Grupo Castilla (CVSS 6.9, Grupo Castilla Epsilon RH)
- [CVE-2015-10147](https://cve.now/CVE-2015-10147.md): Easy Testimonial Slider and Form \<= 1.0.2 - Authenticated (Admin+) SQL injection (CVSS 4.9, nik00726 Easy Testimonial Slider and Form)
- [CVE-2025-12450](https://cve.now/CVE-2025-12450.md): LiteSpeed Cache \<= 7.5.0.1 - Reflected Cross-Site Scripting (CVSS 6.1, litespeedtech LiteSpeed Cache)
- [CVE-2015-10146](https://cve.now/CVE-2015-10146.md): Thumbnail Slider With Lightbox \<= 1.0.4 - Authenticated (Admin+) SQL Injection (CVSS 4.9, nik00726 Thumbnail Slider With Lightbox)
- [CVE-2025-12058](https://cve.now/CVE-2025-12058.md): Vulnerability in Keras Model.load\_model Leading to Arbitrary Local File Loading and SSRF (CVSS 5.9, Keras)
- [CVE-2025-64291](https://cve.now/CVE-2025-64291.md): WordPress Premmerce User Roles plugin \<= 1.0.13 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Premmerce User Roles)
- [CVE-2025-64290](https://cve.now/CVE-2025-64290.md): WordPress Premmerce Product Search for WooCommerce plugin \<= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Premmerce Product Search for WooCommerce)
- [CVE-2025-64289](https://cve.now/CVE-2025-64289.md): WordPress Premmerce Product Search for WooCommerce plugin \<= 2.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Premmerce Product Search for WooCommerce)
- [CVE-2025-64288](https://cve.now/CVE-2025-64288.md): WordPress Premmerce plugin \<= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Premmerce)
- [CVE-2025-64286](https://cve.now/CVE-2025-64286.md): WordPress WP Rentals theme \<= 3.13.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, WpEstate WP Rentals)
- [CVE-2025-64285](https://cve.now/CVE-2025-64285.md): WordPress Premmerce Wholesale Pricing for WooCommerce plugin \<= 1.1.10 - Broken Access Control vulnerability (CVSS 5.4, Premmerce Wholesale Pricing for WooCommerce)
- [CVE-2025-64284](https://cve.now/CVE-2025-64284.md): WordPress Majestic Support plugin \<= 1.0.7 - Local File Inclusion vulnerability (CVSS 7.5, Majestic Support)
- [CVE-2025-64283](https://cve.now/CVE-2025-64283.md): WordPress RTMKit plugin \<= 1.6.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Rometheme RTMKit)
- [CVE-2025-64234](https://cve.now/CVE-2025-64234.md): WordPress Evergreen Content Poster plugin \<= 1.4.5 - Broken Access Control vulnerability (CVSS 4.3, Evergreen Content Poster)
- [CVE-2025-64229](https://cve.now/CVE-2025-64229.md): WordPress Client Invoicing by Sprout Invoices plugin \<= 20.8.7 - Broken Access Control vulnerability (CVSS 4.3, BoldGrid Client Invoicing by Sprout Invoices)
- [CVE-2025-64228](https://cve.now/CVE-2025-64228.md): WordPress SUMO Affiliates Pro plugin \<= 11.0.0 - Sensitive Data Exposure vulnerability (CVSS 4.3, FantasticPlugins SUMO Affiliates Pro)
- [CVE-2025-64226](https://cve.now/CVE-2025-64226.md): WordPress Stockie Extra plugin \<= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, colabrio Stockie Extra)
- [CVE-2025-64220](https://cve.now/CVE-2025-64220.md): WordPress Rey Core plugin \<= 3.1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ReyCommerce Rey Core)
- [CVE-2025-64219](https://cve.now/CVE-2025-64219.md): WordPress Business Directory plugin \<= 6.4.18 - Broken Access Control vulnerability (CVSS 4.3, Strategy11 Team Business Directory)
- [CVE-2025-64216](https://cve.now/CVE-2025-64216.md): WordPress SmartMag theme \<= 10.3.0 - Local File Inclusion vulnerability (CVSS 7.5, ThemeSphere SmartMag)
- [CVE-2025-64212](https://cve.now/CVE-2025-64212.md): WordPress MasterStudy LMS Pro plugin \< 4.7.16 - Broken Access Control vulnerability (CVSS 5.4, StylemixThemes MasterStudy LMS Pro)
- [CVE-2025-64211](https://cve.now/CVE-2025-64211.md): WordPress Masterstudy Elementor Widgets plugin \<= 1.2.4 - Broken Access Control vulnerability (CVSS 5.3, StylemixThemes Masterstudy Elementor Widgets)
- [CVE-2025-64210](https://cve.now/CVE-2025-64210.md): WordPress Masterstudy Elementor Widgets plugin \<= 1.2.4 - Broken Access Control vulnerability (CVSS 5.4, StylemixThemes Masterstudy Elementor Widgets)
- [CVE-2025-64208](https://cve.now/CVE-2025-64208.md): WordPress Jannah - Extensions plugin \<= 1.1.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, TieLabs Jannah - Extensions)
- [CVE-2025-64204](https://cve.now/CVE-2025-64204.md): WordPress SmartMag theme \<= 10.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeSphere SmartMag)
- [CVE-2025-64202](https://cve.now/CVE-2025-64202.md): WordPress Sahifa theme \< 5.8.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, TieLabs Sahifa)
- [CVE-2025-64201](https://cve.now/CVE-2025-64201.md): WordPress PowerPress Podcasting plugin \<= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, blubrry PowerPress Podcasting)
- [CVE-2025-64200](https://cve.now/CVE-2025-64200.md): WordPress Email Template Customizer for WooCommerce plugin \<= 1.2.17 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, VillaTheme Email Template Customizer for WooCommerce)
- [CVE-2025-64199](https://cve.now/CVE-2025-64199.md): WordPress wpresidence theme \<= 5.3.2 - Broken Access Control vulnerability (CVSS 5.3, WpEstate wpresidence)
- [CVE-2025-64197](https://cve.now/CVE-2025-64197.md): WordPress Rehub theme \< 19.9.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, sizam Rehub)
- [CVE-2025-64195](https://cve.now/CVE-2025-64195.md): WordPress Eduma theme \<= 5.7.6 - Local File Inclusion vulnerability (CVSS 7.5, ThimPress Eduma)
- [CVE-2025-64194](https://cve.now/CVE-2025-64194.md): WordPress Eduma theme \<= 5.7.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThimPress Eduma)
- [CVE-2025-60075](https://cve.now/CVE-2025-60075.md): WordPress hpb seo plugin for WordPress plugin \<= 3.0.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, Allegro Marketing hpb seo plugin for WordPress)
- [CVE-2025-58939](https://cve.now/CVE-2025-58939.md): WordPress Super Store Finder plugin \<= 7.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, highwarden Super Store Finder)
- [CVE-2025-58711](https://cve.now/CVE-2025-58711.md): WordPress Blog Designer PRO plugin \<= 3.4.8 - Broken Access Control vulnerability (CVSS 5.3, solwin Blog Designer PRO)
- [CVE-2025-11702](https://cve.now/CVE-2025-11702.md): Missing Authorization in GitLab (CVSS 8.5, GitLab)
- [CVE-2023-7320](https://cve.now/CVE-2023-7320.md): WooCommerce \<= 7.8.2 - Sensitive Information Exposure (CVSS 5.3, automattic WooCommerce)
- [CVE-2025-9544](https://cve.now/CVE-2025-9544.md): Doppler Forms \<= 2.5.1 - Subscriber+ Limited Plugin Installation (CVSS 6.5, Doppler Forms)
- [CVE-2025-49042](https://cve.now/CVE-2025-49042.md): WordPress WooCommerce plugin \<= 10.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Automattic WooCommerce)
- [CVE-2025-62776](https://cve.now/CVE-2025-62776.md): The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic… (CVSS 7.8, Wireless Tsukamoto Co. WTW EAGLE)
- [CVE-2025-11705](https://cve.now/CVE-2025-11705.md): Anti-Malware Security and Brute-Force Firewall \<= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read (CVSS 6.5, scheeeli Anti-Malware Security and Brute-Force Firewall)
- [CVE-2025-64296](https://cve.now/CVE-2025-64296.md): WordPress Facebook for WooCommerce plugin \<= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability (CVSS 5.3, Facebook for WooCommerce)
- [CVE-2025-57931](https://cve.now/CVE-2025-57931.md): WordPress Popup box plugin \<= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.3, Ays Pro Popup box)
- [CVE-2024-45161](https://cve.now/CVE-2024-45161.md): A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. (CVSS 4.6)
- [CVE-2024-45162](https://cve.now/CVE-2024-45162.md): A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field. (CVSS 9.8)
- [CVE-2025-56558](https://cve.now/CVE-2025-56558.md): The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct values of… (CVSS 3.0, Dyson MQTT server)
- [CVE-2025-57227](https://cve.now/CVE-2025-57227.md): An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted… (CVSS 7.8)
- [CVE-2025-60320](https://cve.now/CVE-2025-60320.md): memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). (CVSS 6.7)
- [CVE-2025-60542](https://cve.now/CVE-2025-60542.md): SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call… (CVSS 6.5, typeorm)
- [CVE-2025-60595](https://cve.now/CVE-2025-60595.md): SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution. (CVSS 8.2)
- [CVE-2025-60898](https://cve.now/CVE-2025-60898.md): An unauthenticated server-side request forgery (SSRF) vulnerability in the Thumbnail via-uri endpoint of Halo CMS 2.21 allows a remote… (CVSS 5.8)
- [CVE-2025-61156](https://cve.now/CVE-2025-61156.md): Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute… (CVSS 7.8)
- [CVE-2025-61161](https://cve.now/CVE-2025-61161.md): DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search… (CVSS 8.4)
- [CVE-2025-61234](https://cve.now/CVE-2025-61234.md): Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 by default on the local network without… (CVSS 7.5)
- [CVE-2025-61429](https://cve.now/CVE-2025-61429.md): An issue in NCR Atleos Terminal Manager (ConfigApp) v3.4.0 allows attackers to escalate privileges via a crafted request. (CVSS 8.8)
- [CVE-2025-61876](https://cve.now/CVE-2025-61876.md): Insecure Direct Object Reference (IDOR) in /tenants/{id} API endpoint in Inforcer Platform version 2.0.153 allows an authenticated user… (CVSS 5.0)
- [CVE-2025-63622](https://cve.now/CVE-2025-63622.md): A vulnerability was found in code-projects Online Complaint Site 1.0. (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2025-10-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.