CVEs published April 12, 2025
15 CVEs were published on April 12, 2025: 0 critical, 3 high.
- Published
- 15
- Critical
- 0
- High
- 3
- Medium
- 12
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- creativemotion Clearfy Cache – WordPress optimization plugi…
- 2
- wpeverest User Registration & Membership – Free & Paid Memb…
- 2
- wproyal Royal Addons for Elementor – Addons and Templates K…
- 2
- bap22 Developer Toolbar
- 1
- LDS Crypt::CBC
- 1
- Microsoft Edge
- 1
- Microsoft SQL Server Management Studio · Microsoft Visua… +2
- 1
- Microsoft Visual Studio Code
- 1
- quadlayers QuadMenu – Mega Menu
- 1
- reality66 Cart66 Cloud :: WordPress Ecommerce The Easy Way
- 1
High 3
- CVE-2025-3418WPC Admin Columns 2.0.6 - 2.1.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Updatewpclever WPC Admin Columns
- CVE-2025-29834Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2025-29803Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege VulnerabilityMicrosoft SQL Server Management Studio · Microsoft Visua… +2
Medium, low and unrated 12
- CVE-2025-2814Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functionsLDS Crypt::CBC
- CVE-2025-1456Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2025-1455Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2024-13338Webcraftic Clearfy – WordPress optimization plugin <= 2.3.1 - Cross-Site Request Forgery to Clear Cachecreativemotion Clearfy Cache – WordPress optimization plugi…
- CVE-2025-3276SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingsonalsinha21 SKT Blocks – Gutenberg based Page Builder
- CVE-2024-13337Webcraftic Clearfy – WordPress optimization plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy'creativemotion Clearfy Cache – WordPress optimization plugi…
- CVE-2025-3282User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modificationwpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2025-3292User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Updatewpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2025-2871WordPress Mega Menu – QuadMenu <= 3.2.0 - Cross-Site Request Forgery to Limited User Meta Updatequadlayers QuadMenu – Mega Menu
- CVE-2025-2881Developer Toolbar <= 1.0.3 - Unauthenticated Information Exposurebap22 Developer Toolbar
- CVE-2025-2841Cart66 Cloud <= 2.3.7 - Unauthenticated Information Exposurereality66 Cart66 Cloud :: WordPress Ecommerce The Easy Way
- CVE-2025-32726Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code