CVEs published February 16, 2025
40 CVEs were published on February 16, 2025: 2 critical, 10 high.
- Published
- 40
- Critical
- 2
- High
- 10
- Medium
- 27
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- CmsEasy
- 2
- enituretechnology LTL Freight Quotes – Unishippers Edition
- 2
- enituretechnology LTL Freight Quotes – Worldwide Express Ed…
- 2
- GNU elfutils
- 2
- needyamin Library Card System
- 2
- TOTOLINK X18
- 2
- alexvtn Content Snippet Manager
- 1
- ASUS RT-N12E · ASUS RT-N10E
- 1
- AWS S3 for WordPress Plugin – Upcasted
- 1
- brandexponents Oshine Modules
- 1
Critical 2
- CVE-2025-22290WordPress LTL Freight Quotes – FreightQuote Edition Plugin <= 2.3.11 - SQL Injection vulnerabilityenituretechnology LTL Freight Quotes – FreightQuote Edition
- CVE-2024-57971DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occureng KNOWAGE
High 10
- CVE-2025-0591Out-of-bounds Read vulnerability in CX-ProgrammerOMRON FA Integrated Tool Package CX-One
- CVE-2025-26768WordPress what3words Address Field plugin <= 4.0.15 - CSRF to Stored XSS vulnerabilitywhat3words Address Field
- CVE-2025-26759WordPress Content Snippet Manager plugin <= 1.1.5 - CSRF to Stored XSS vulnerabilityalexvtn Content Snippet Manager
- CVE-2025-26755WordPress WP Airbnb Review Slider Plugin <= 3.9 - SQL Injection vulnerabilityjgwhite33 WP Airbnb Review Slider
- CVE-2025-22680WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerabilityNotFound Ad Inserter Pro
- CVE-2025-22286WordPress LTL Freight Quotes – Worldwide Express Edition plugin <= 5.0.21 - Reflected Cross Site Scripting (XSS) vulnerabilityenituretechnology LTL Freight Quotes – Worldwide Express Ed…
- CVE-2025-22284WordPress LTL Freight Quotes – Unishippers Edition plugin <= 2.5.8 - Reflected Cross Site Scripting (XSS) vulnerabilityenituretechnology LTL Freight Quotes – Unishippers Edition
- CVE-2024-44044WordPress Oshine Modules plugin < 3.3.8 - Reflected Cross Site Scripting (XSS) vulnerabilitybrandexponents Oshine Modules
- CVE-2025-1353Kong Insomnia profapi.dll untrusted search pathKong Insomnia
- CVE-2025-1340TOTOLINK X18 cstecgi.cgi setPasswordCfg stack-based overflowTOTOLINK X18
Medium, low and unrated 28
- CVE-2025-1365GNU elfutils eu-readelf readelf.c process_symtab buffer overflowGNU elfutils
- CVE-2025-1364MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflowMicroWord eScan Antivirus
- CVE-2025-26779WordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerabilityFahad Mahmood Keep Backup Daily
- CVE-2025-26767WordPress Qubely plugin <= 1.8.12 - Cross Site Scripting (XSS) vulnerabilityThemeum Qubely
- CVE-2025-26766WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerabilityVaultDweller Leyka
- CVE-2025-26765WordPress Distance Based Shipping Calculator plugin <= 2.0.22 - Broken Access Control vulnerabilityenituretechnology Distance Based Shipping Calculator
- CVE-2025-26761WordPress Easy Elementor Addons plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityhashthemes Easy Elementor Addons
- CVE-2025-23975WordPress Botnet Attack Blocker plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerabilitycheesefather Botnet Attack Blocker
- CVE-2025-22689WordPress Forex Calculators plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerabilityLevan Tarbor Forex Calculators
- CVE-2025-22676WordPress Upcasted S3 Offload plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerabilityAWS S3 for WordPress Plugin – Upcasted
- CVE-2025-22291WordPress LTL Freight Quotes – Worldwide Express Edition plugin <= 5.0.20 - Arbitrary Content Deletion vulnerabilityenituretechnology LTL Freight Quotes – Worldwide Express Ed…
- CVE-2025-22289WordPress LTL Freight Quotes – Unishippers Edition plugin <= 2.5.8 - Broken Access Control vulnerabilityenituretechnology LTL Freight Quotes – Unishippers Edition
- CVE-2025-1360Internet Web Solutions Sublime CRM HTTP POST Request inicio.php cross site scriptingInternet Web Solutions Sublime CRM
- CVE-2025-1359SIAM Industria de Automação e Monitoramento qrcode.jsp cross site scriptingSIAM Industria de Automação e Monitoramento SIAM
- CVE-2025-1358Pix Software Vivaz cross-site request forgeryPix Software Vivaz
- CVE-2025-1357Seventh D-Guard HTTP GET Request path traversalSeventh D-Guard
- CVE-2025-1356needyamin Library Card System card.php sql injectionneedyamin Library Card System
- CVE-2025-1355needyamin Library Card System Add Picture signup.php unrestricted uploadneedyamin Library Card System
- CVE-2025-1354A cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware .ASUS RT-N12E · ASUS RT-N10E
- CVE-2025-1352GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruptionGNU elfutils
- CVE-2025-1341PMWeb Setting weak passwordPMWeb
- CVE-2025-1339TOTOLINK X18 cstecgi.cgi setL2tpdConfig os command injectionTOTOLINK X18
- CVE-2025-1338NUUO Camera handle_config.php print_file command injectionNUUO Camera
- CVE-2025-1337Eastnets PaymentSafe BIC Search cross site scriptingEastnets PaymentSafe
- CVE-2025-1336CmsEasy image_admin.php deleteimg_action path traversalCmsEasy
- CVE-2025-1335CmsEasy file_admin.php deleteimg_action path traversalCmsEasy
- CVE-2025-1332FastCMS Template Menu menu cross site scriptingFastCMS
- CVE-2024-57970libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive beclibarchive