CVEs published April 25, 2025
78 CVEs were published on April 25, 2025: 6 critical, 25 high. 3 are now in CISA KEV.
- Published
- 78
- Critical
- 6
- High
- 25
- Medium
- 42
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 38
Most affected products
- moodle · moodle/moodle
- 16
- Sherpa Orchestrator
- 4
- FileZ Client
- 3
- JetBrains TeamCity
- 3
- buildwps Prevent Direct Access – Protect WordPress Files
- 2
- Quantum StorNext
- 2
- remix-run react-router · react-router
- 2
- AlphaEfficiencyTeam Custom Login and Registration
- 1
- Andamiro Pump It Up
- 1
- aonetheme Service Finder Bookings
- 1
Critical 6
- CVE-2025-32432Craft CMS Allows Remote Code Executioncraftcms cms · craftcms/cms
- CVE-2025-2470Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input'aonetheme Service Finder Bookings
- CVE-2025-25775Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.
- CVE-2025-32980NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration.
- CVE-2025-32985NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
- CVE-2025-46616Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file.Quantum StorNext
High 25
- CVE-2025-46333z2d OOB composition could lead to invalid memory access and corruptionvancluever z2d
- CVE-2025-3935ScreenConnect Exposure to ASP.NET ViewState Code InjectionConnectWise ScreenConnect
- CVE-2025-3928Commvault Web Server unspecified vulnerabilityCommvault Web Server
- CVE-2025-43862Dify Allows Unauthorized Access and Modification of APP Orchestrationlanggenius dify
- CVE-2025-32044Moodle: unauthenticated rest api user data exposuremoodle · moodle/moodle
- CVE-2025-3642Moodle: authenticated remote code execution risk in the moodle lms equella repositorymoodle · moodle/moodle
- CVE-2025-3641Moodle: authenticated remote code execution risk in the moodle lms dropbox repositorymoodle · moodle/moodle
- CVE-2025-3638Moodle: csrf risk in brickfield tool's analysis request actionmoodle · moodle/moodle
- CVE-2025-3625Moodle: user dos and name disclosure via idor in moodle mfa email factor revoke actionmoodle
- CVE-2024-6199Unauthenticated Remote Code ExecutionViaSat RM5110 · ViaSat RM5111 +3
- CVE-2024-6198SNORE Interface Unauthenticated Remote Code ExecutionViaSat RM4100 · Viasat RM4200 +7
- CVE-2024-11917JobSearch WP Job Board <= 2.9.2 - Authentication Bypass via Social Loginseyecix JobSearch WP Job Board
- CVE-2025-1565Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File ReadTeconceTheme Mayosis Core
- CVE-2025-1279BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateSeaTheme BM Content Builder
- CVE-2025-2238Vikinger <= 1.9.30 - Authenticated (Subscriber+) Privilege Escalation via 'vikinger_user_meta_update_ajax'Odin_Design Vikinger
- CVE-2025-3511Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-LinMitsubishi Electric CC-Link IE TSN Remote I/O module NZ… +47
- CVE-2025-43865React Router allows pre-render data spoofing on React-Router framework moderemix-run react-router · react-router
- CVE-2025-43864React Router allows a DoS via cache poisoning by forcing SPA moderemix-run react-router · react-router
- CVE-2025-28128An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request.
- CVE-2025-32981NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.
- CVE-2025-32982NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
- CVE-2025-32983NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.
- CVE-2025-32986NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.
- CVE-2025-46613OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack fropenplcproject OpenPLC
- CVE-2025-46617Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software coQuantum StorNext
Medium, low and unrated 47
- CVE-2024-30152HCL SX is affected by usage of a weak cryptographic algorithmHCL Software HCL SX
- CVE-2025-2070An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url FileZ Client
- CVE-2025-2069A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a loFileZ Client
- CVE-2025-2068An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a locFileZ Client
- CVE-2024-56156Halo Vulnerable to Stored XSS and RCE via File Upload Bypasshalo-dev halo
- CVE-2025-32045Moodle: hidden grades shown to users without permission on some grade reportsmoodle · moodle/moodle
- CVE-2025-3647Moodle: idor when accessing the cohorts reportmoodle · moodle/moodle
- CVE-2025-3645Moodle: idor in messaging web service allows access to some user detailsmoodle · moodle/moodle
- CVE-2025-3644Moodle: ajax section delete does not respect course_can_delete_section()moodle · moodle/moodle
- CVE-2025-3643Moodle: reflected xss risk in policy toolmoodle · moodle/moodle
- CVE-2025-3640Moodle: idor in web service allows users enrolled in a course to access some details of other usersmoodle · moodle/moodle
- CVE-2025-3637Moodle: csrf token exposure via url in moodle mod_data modulemoodle · moodle/moodle
- CVE-2025-3636Moodle: idor in moodle rss block allows unauthorized access to rss feedsmoodle · moodle/moodle
- CVE-2025-3635Moodle: csrf risk in moodle user tours manager allows tour duplicationmoodle · moodle/moodle
- CVE-2025-3628Moodle: moodle assignment submission search leaks anonymous student identitiesmoodle · moodle/moodle
- CVE-2025-3627Moodle: partial data exposure in moodle before completing multi-factor authenticationmoodle · moodle/moodle
- CVE-2025-46618In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tabJetBrains TeamCity
- CVE-2025-46433In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possibleJetBrains TeamCity
- CVE-2025-46432In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logsJetBrains TeamCity
- CVE-2025-43016In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug sessionJetBrains Rider
- CVE-2025-3634Moodle: moodle allows course self-enrolment before completing mfamoodle · moodle/moodle
- CVE-2025-3912WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposurewestguard WS Form LITE – Drag & Drop Contact Form Builder
- CVE-2025-2986IBM Maximo Asset Management cross-site scriptingIBM Maximo Asset Management
- CVE-2025-38701 Decembrie 1918 <= 1.dec.2012 - Cross-Site Request Forgery to Stored Cross-Site Scriptingolarmarius 1 Decembrie
- CVE-2025-46535WordPress Custom Login and Registration plugin <= 1.0.0 - Broken Access Control vulnerabilityAlphaEfficiencyTeam Custom Login and Registration
- CVE-2025-46482WordPress WP Quiz plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerabilityMyThemeShop WP Quiz
- CVE-2025-3743Upsell Funnel Builder for WooCommerce <= 3.0.0 - Unauthenticated Order Manipulationwpswings Upsell Funnel Builder for WooCommerce – Create Ups…
- CVE-2025-3868Custom Admin-Bar Favorites <= 0.1 - Reflected Cross-Site Scriptingcodeandreload Custom Admin-Bar Favorites
- CVE-2025-3867Ajax Comment Form CST <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptingrafe007 Ajax Comment Form CST
- CVE-2025-3866Add Google +1 (Plus one) social share Button <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scriptingrohanpawale Add Google +1 (Plus one) social share Button
- CVE-2025-0671Email Subscribers < 5.7.50 - Admin+ Stored XSS in TemplateIcegram Express
- CVE-2025-3923Prevent Direct Access – Protect WordPress Files <= 2.8.8 - Unauthenticated Sensitive Information Exposurebuildwps Prevent Direct Access – Protect WordPress Files
- CVE-2025-3861Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actionsbuildwps Prevent Direct Access – Protect WordPress Files
- CVE-2025-2580Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadbitpressadmin Bit Form – Custom Contact Form, Multi Step, C…
- CVE-2025-3752Able Player, accessible HTML5 media player <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via preload Parameterjoedolson Able Player, accessible HTML5 media player
- CVE-2025-3775ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameterdevitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2024-57375Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of serAndamiro Pump It Up
- CVE-2025-28076Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.4 and CO2Scope <= 1.3.4 allows remote authenticated attackers to execute a
- CVE-2025-28354An issue in the Printer Manager Systm of Entrust Corp Printer Manager D3.18.4-3 and below allows attackers to execute a directory traversal
- CVE-2025-32979NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.
- CVE-2025-32984NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.
- CVE-2025-46544In Sherpa Orchestrator 141851, a low-privileged user can elevate their privileges by creating new users and roles.Sherpa Orchestrator
- CVE-2025-46545In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through tSherpa Orchestrator
- CVE-2025-46546In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user.Sherpa Orchestrator
- CVE-2025-46547In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSherpa Orchestrator
- CVE-2025-46595An XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS.backdropcms Flag
- CVE-2025-46599CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations,K3s · github.com/k3s-io/k3s