CVEs published February 1, 2025
39 CVEs were published on February 1, 2025: 0 critical, 5 high.
- Published
- 39
- Critical
- 0
- High
- 5
- Medium
- 33
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- itsourcecode Tailoring Management System
- 8
- wpjobportal WP Job Portal – AI-Powered Recruitment System f…
- 5
- Dell PowerProtect DD
- 3
- artbees Jupiter X Core
- 2
- WP Finance
- 2
- brechtvds Custom Related Posts
- 1
- code-projects Job Recruitment
- 1
- Contact Forms by Cimatti
- 1
- creativeinteractivemedia AnimateGL Animations for WordPress…
- 1
- dcooperman MagicForm
- 1
High 5
- CVE-2025-0366Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)artbees Jupiter X Core
- CVE-2024-53295Dell PowerProtect DD versions prior to 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain an improper access control vulnerability.Dell PowerProtect DD
- CVE-2024-51534Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability.Dell PowerProtect DD
- CVE-2024-12171ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationelextensions ELEX WordPress HelpDesk & Customer Ticketing S…
- CVE-2024-13343WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege EscalationVanquish WooCommerce Customers Manager
Medium, low and unrated 34
- CVE-2025-0961code-projects Job Recruitment load_job-details.php cross site scriptingcode-projects Job Recruitment
- CVE-2025-0950itsourcecode Tailoring Management System staffview.php sql injectionitsourcecode Tailoring Management System
- CVE-2025-0949itsourcecode Tailoring Management System partview.php sql injectionitsourcecode Tailoring Management System
- CVE-2025-0948itsourcecode Tailoring Management System incview.php sql injectionitsourcecode Tailoring Management System
- CVE-2025-0947itsourcecode Tailoring Management System expview.php sql injectionitsourcecode Tailoring Management System
- CVE-2025-0946itsourcecode Tailoring Management System templatedelete.php sql injectionitsourcecode Tailoring Management System
- CVE-2025-0945itsourcecode Tailoring Management System typedelete.php sql injectionitsourcecode Tailoring Management System
- CVE-2025-0944itsourcecode Tailoring Management System customerview.php sql injectionitsourcecode Tailoring Management System
- CVE-2024-13775WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposurevanquish WooCommerce Support Ticket System
- CVE-2024-13612Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodewordplus Better Messages – Live Chat, Chat Rooms, Real-Time…
- CVE-2025-0943itsourcecode Tailoring Management System deldoc.php sql injectionitsourcecode Tailoring Management System
- CVE-2024-13372WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Downloadwpjobportal WP Job Portal – AI-Powered Recruitment System f…
- CVE-2024-13371WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sendingwpjobportal WP Job Portal – AI-Powered Recruitment System f…
- CVE-2024-13428WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletionwpjobportal WP Job Portal – AI-Powered Recruitment System f…
- CVE-2024-13425WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletionwpjobportal WP Job Portal – AI-Powered Recruitment System f…
- CVE-2024-13429WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletionwpjobportal WP Job Portal – AI-Powered Recruitment System f…
- CVE-2024-12825Custom Related Posts <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updatesbrechtvds Custom Related Posts
- CVE-2025-23091An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-Ubiquiti UDM · Ubiquiti UDM-Pro +9
- CVE-2024-11829The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scriptingposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2025-0939MagicForm - WordPress Form Builder <= 1.6.2 - Missing Authorizationdcooperman MagicForm
- CVE-2024-13341MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL InjectionTechspawn MultiLoca - WooCommerce Multi Locations Inventory…
- CVE-2024-13099Widget4call <= 1.0.7 - Reflected XSSWidget4Call
- CVE-2024-13098WP Email Newsletter <= 1.1 - Reflected XSSWordPress Email Newsletter
- CVE-2024-13097WP Finance <= 1.3.6 - Reflected XSSWP Finance
- CVE-2024-13096WP Finance <= 1.3.6 - Stored XSS via CSRFWP Finance
- CVE-2024-12768Responsive iframe <= 1.2.0 - Contributor+ Stored XSSResponsive iframe
- CVE-2025-0365Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Readartbees Jupiter X Core
- CVE-2024-12041Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposurewpwax Directorist: AI-Powered Business Directory, Listings…
- CVE-2024-53296Dell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI.Dell PowerProtect DD
- CVE-2024-13651RapidLoad – Optimize Web Vitals Automatically <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Limited Setting Resetshakee93 RapidLoad AI – Optimize Web Vitals Automatically
- CVE-2024-12620AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations <= 1.4.23 - Missing Authorization to Unauthenticated Settings Updatecreativeinteractivemedia AnimateGL Animations for WordPress…
- CVE-2024-12184WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission DownloadContact Forms by Cimatti
- CVE-2024-11780Site Search 360 <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingdsky Site Search
- CVE-2024-13547aThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scriptingsmub aThemes Addons for Elementor