CVEs published March 29, 2025
9 CVEs were published on March 29, 2025: 1 critical, 3 high.
- Published
- 9
- Critical
- 1
- High
- 3
- Medium
- 4
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- berrypress Inline Image Upload for BBPress
- 1
- bhuvnesh DAP to Autoresponders Email Syncing
- 1
- davemacd So-Called Air Quotes
- 1
- IBM InfoSphere Information Server
- 1
- mestresdowp Checkout Mestres do WP for WooCommerce
- 1
- PHP Group PHP
- 1
- roxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- 1
- Shortcodes by United Themes
- 1
- sojweb SoJ SoundSlides
- 1
Critical 1
High 3
- CVE-2025-2249SoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Uploadsojweb SoJ SoundSlides
- CVE-2025-2006Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Uploadberrypress Inline Image Upload for BBPress
- CVE-2025-2803So-Called Air Quotes <= 0.1 - Unauthenticated Arbitrary Shortcode Executiondavemacd So-Called Air Quotes
Medium, low and unrated 5
- CVE-2024-55895IBM InfoSphere Information Server information disclosureIBM InfoSphere Information Server
- CVE-2024-11180ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingroxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- CVE-2024-13557Shortcodes by United Themes <= 5.1.6 - Unauthenticated Arbitrary Shortcode ExecutionShortcodes by United Themes
- CVE-2025-2840DAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposurebhuvnesh DAP to Autoresponders Email Syncing
- CVE-2025-1217Header parser of http stream wrapper does not handle folded headersPHP Group PHP