CVEs published June 6, 2025
342 CVEs were published on June 6, 2025: 12 critical, 90 high.
- Published
- 342
- Critical
- 12
- High
- 90
- Medium
- 234
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 46
Most affected products
- QNAP Systems File Station
- 14
- TOTOLINK X15
- 12
- Huawei HarmonyOS
- 10
- ZIV IDF and ZLF
- 8
- SourceCodester Student Result Management System
- 7
- Soar Cloud System CO. HRD Human Resource Management System
- 6
- code-projects Laundry System
- 5
- code-projects Real Estate Property Management System
- 5
- SourceCodester Open Source Clinic Management System
- 5
- WOLFBOX Level 2 EV Charger
- 5
Critical 12
- CVE-2025-27531Apache InLong: An arbitrary file read vulnerability for JDBCApache Software Foundation Apache InLong · org.apache.inlon…
- CVE-2025-41646RevPi Webstatus application is vulnerable to an authentication bypassKunbus Revolution Pi webstatus
- CVE-2025-49072WordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection VulnerabilityAncoraThemes Mr. Murphy
- CVE-2025-49073WordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerabilityaxiomthemes Sweet Dessert
- CVE-2025-47586WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes Motors - Events
- CVE-2025-48782Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous TypeSoar Cloud System CO. HRD Human Resource Management System
- CVE-2025-48780Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted DataSoar Cloud System CO. HRD Human Resource Management System
- CVE-2025-5192Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical FunctionSoar Cloud System CO. HRD Human Resource Management System
- CVE-2025-3365Relative Path Traversal in OnlineSuiteB. Braun Melsungen AG OnlineSuite
- CVE-2025-3322Improper Neutralization of Special Elements in OnlineSuiteB. Braun Melsungen AG OnlineSuite
- CVE-2025-3321Use of Hard-coded Credentials in OnlineSuiteB. Braun Melsungen AG OnlineSuite
- CVE-2025-5486WP Email Debug 1.0 - 1.1.0 - Missing Authorization to Unauthenticated Privilege Escalation via Password Resetdr_scythe WP Email Debug
High 90
- CVE-2025-49127Kafbat UI vulnerable to Remote Code Execution by JMX in Metrices Configurationkafbat kafka-ui
- CVE-2025-5799Tenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflowTenda AC8
- CVE-2025-5798Tenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflowTenda AC8
- CVE-2025-276670mai A510 Use of Default Password Authentication Bypass Vulnerability70mai A510
- CVE-2025-3485Allegra extractFileFromZip Directory Traversal Remote Code Execution VulnerabilityAllegra
- CVE-2025-5481Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilitySante DICOM Viewer Pro
- CVE-2025-5480Action1 Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityAction1
- CVE-2025-54742BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability2BrightSparks SyncBackFree
- CVE-2025-5473GIMP ICO File Parsing Integer Overflow Remote Code Execution VulnerabilityGIMP
- CVE-2025-5795Tenda AC5 AdvSetLanip fromadvsetlanip buffer overflowTenda AC5
- CVE-2025-5794Tenda AC5 setPptpUserList formSetPPTPUserList buffer overflowTenda AC5
- CVE-2025-5793TOTOLINK EX1200T HTTP POST Request formPortFw buffer overflowTOTOLINK EX1200T
- CVE-2025-5792TOTOLINK EX1200T HTTP POST Request formWlanRedirect buffer overflowTOTOLINK EX1200T
- CVE-2025-47950CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplificationcoredns · github.com/coredns/coredns
- CVE-2025-5790TOTOLINK X15 HTTP POST Request formIpQoS buffer overflowTOTOLINK X15
- CVE-2025-5789TOTOLINK X15 HTTP POST Request formPortFw buffer overflowTOTOLINK X15
- CVE-2025-5788TOTOLINK X15 HTTP POST Request formReflashClientTbl buffer overflowTOTOLINK X15
- CVE-2025-5787TOTOLINK X15 HTTP POST Request formWsc buffer overflowTOTOLINK X15
- CVE-2025-5786TOTOLINK X15 HTTP POST Request formDMZ buffer overflowTOTOLINK X15
- CVE-2025-5785TOTOLINK X15 HTTP POST Request formWirelessTbl buffer overflowTOTOLINK X15
- CVE-2025-29885File Station 5QNAP Systems File Station
- CVE-2025-29884File Station 5QNAP Systems File Station
- CVE-2025-29883File Station 5QNAP Systems File Station
- CVE-2025-22486File Station 5QNAP Systems File Station
- CVE-2025-29892Qsync CentralQNAP Systems Qsync Central
- CVE-2025-22481QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-22484File Station 5QNAP Systems File Station
- CVE-2025-29872File Station 5QNAP Systems File Station
- CVE-2025-30279File Station 5QNAP Systems File Station
- CVE-2025-33031File Station 5QNAP Systems File Station
- CVE-2025-33035File Station 5QNAP Systems File Station
- CVE-2025-5747WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution VulnerabilityWOLFBOX Level 2 EV Charger
- CVE-2025-5748WOLFBOX Level 2 EV Charger LAN OTA Exposed Dangerous Method Remote Code Execution VulnerabilityWOLFBOX Level 2 EV Charger
- CVE-2025-5750WOLFBOX Level 2 EV Charger tuya_svc_devos_activate_result_parse Heap-based Buffer Overflow Remote Code Execution VulnerabilityWOLFBOX Level 2 EV Charger
- CVE-2025-38002io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo()Linux
- CVE-2025-38001net_sched: hfsc: Address reentrant enqueue adding class to eltree twiceLinux
- CVE-2025-5806Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introducJenkins Project Jenkins Gatling Plugin · org.jenkins-ci.plu…
- CVE-2025-5791Users: `root` appended to group listingsrust-users · Red Hat OpenShift sandboxed containers +4
- CVE-2025-38000sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()Linux
- CVE-2025-49421WordPress WP Text Expander plugin <= 1.0.1 - SQL Injection VulnerabilityAndrei Filonov WP Text Expander
- CVE-2025-49425WordPress Konami Easter Egg plugin <= v0.4 - Cross Site Request Forgery (CSRF) VulnerabilityAdrian Hanft Konami Easter Egg
- CVE-2025-49453WordPress BP Profile as Homepage plugin <= 1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilityJatinder Pal Singh BP Profile as Homepage
- CVE-2023-25995WordPress AI Mortgage Calculator <= 1.0.1 - Local File Inclusion Vulnerabilitychoicehomemortgage AI Mortgage Calculator
- CVE-2023-26003WordPress WP Post Corrector <= 1.0.2 - SQL Injection Vulnerabilityvipul Jariwala WP Post Corrector
- CVE-2025-26590WordPress Complete Google Seo Scan plugin <= 3.5.1 - SQL Injection VulnerabilityNir Complete Google Seo Scan
- CVE-2025-28948WordPress Mediabay - WordPress Media Library Folders plugin <= 1.4 - CSRF to Reflected XSS vulnerabilitycodedraft Mediabay - WordPress Media Library Folders
- CVE-2025-28950WordPress Post Author plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) VulnerabilityDavid Shabtai Post Author
- CVE-2025-28954WordPress Backwp plugin <= 2.0.2 - CSRF to Arbitrary File Deletion vulnerabilitywphobby Backwp
- CVE-2025-28958WordPress Bg Orthodox Calendar plugin <= 0.13.10 - CSRF to Stored XSS vulnerabilityVadim Bogaiskov Bg Orthodox Calendar
- CVE-2025-28964WordPress Personal Favicon plugin <= 2.0 - CSRF to Stored XSS vulnerabilitymangup Personal Favicon
- CVE-2025-28966WordPress Recent Posts Slider Responsive plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) vulnerabilitydilemma123 Recent Posts Slider Responsive
- CVE-2025-28974WordPress Free WP Mail SMTP plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilitymail250 Free WP Mail SMTP
- CVE-2025-28981WordPress WP Mail Options plugin <= 0.2.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilitySoli WP Mail Options
- CVE-2025-28986WordPress Epicwin Plugin plugin <= 1.5 - CSRF to SQL Injection vulnerabilityWebaholicson Epicwin Plugin
- CVE-2025-30989WordPress Libro de Reclamaciones y Quejas plugin <= 0.9 - SQL Injection VulnerabilityRenzo Tejada Libro de Reclamaciones y Quejas
- CVE-2025-30995WordPress Widgetize Pages Light plugin <= 3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilityOTWthemes Widgetize Pages Light
- CVE-2025-30999WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerabilityFahad Mahmood External Store for Shopify
- CVE-2025-49328WordPress Store Locator WordPress plugin <= 1.5.1 - SQL Injection VulnerabilityAgile Logix Store Locator WordPress
- CVE-2025-49327WordPress ShortLinks Pro plugin <= 1.0.7 - SQL Injection VulnerabilityRuben Garcia ShortLinks Pro
- CVE-2025-49326WordPress GamiPress plugin <= 7.4.5 - SQL Injection VulnerabilityRuben Garcia GamiPress
- CVE-2025-49323WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection VulnerabilityThemefic Hydra Booking
- CVE-2025-49315WordPress Persian Woocommerce SMS plugin <= 7.0.10 - SQL Injection VulnerabilityPersianScript Persian Woocommerce SMS
- CVE-2025-49313WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerabilityovatheme BRW
- CVE-2025-49308WordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion VulnerabilityWP Travel Engine
- CVE-2025-49307WordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion VulnerabilityMagazine3 WP Multilang
- CVE-2025-49288WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak VulnerabilityRustaurius Ultimate WP Mail
- CVE-2025-49263WordPress WC Vendors Marketplace plugin <= 2.5.6 - SQL Injection VulnerabilityWCVendors WC Vendors Marketplace
- CVE-2025-49262WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerabilityshaonsina Sina Extension for Elementor
- CVE-2025-49237WordPress POEditor plugin <= 0.9.10 - CSRF to Arbitrary File Deletion vulnerabilityPOEditor
- CVE-2025-41361Uncontrolled resource consumption vulnerability in IDF and ZLFZIV IDF and ZLF
- CVE-2025-48329WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerabilityDaman Jeet Real Time Validation for Gravity Forms
- CVE-2025-39358WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerabilityteastudio.pl WP Posts Carousel
- CVE-2025-47584WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerabilityThemeGoods Photography
- CVE-2025-41360Uncontrolled resource consumption vulnerability in IDF and ZLFZIV IDF and ZLF
- CVE-2025-48784Soar Cloud HRD Human Resource Management System - Missing AuthorizationSoar Cloud System CO. HRD Human Resource Management System
- CVE-2025-48783Soar Cloud HRD Human Resource Management System - External Control of File Name or PathSoar Cloud System CO. HRD Human Resource Management System
- CVE-2025-48781Soar Cloud HRD Human Resource Management System - External Control of File Name or PathSoar Cloud System CO. HRD Human Resource Management System
- CVE-2025-5739TOTOLINK X15 HTTP POST Request formSaveConfig buffer overflowTOTOLINK X15
- CVE-2025-5738TOTOLINK X15 HTTP POST Request formStats buffer overflowTOTOLINK X15
- CVE-2025-5737TOTOLINK X15 HTTP POST Request formDosCfg buffer overflowTOTOLINK X15
- CVE-2025-5736TOTOLINK X15 HTTP POST Request formNtp buffer overflowTOTOLINK X15
- CVE-2025-5735TOTOLINK X15 HTTP POST Request formSetLg buffer overflowTOTOLINK X15
- CVE-2025-5734TOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflowTOTOLINK X15
- CVE-2025-48911Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect Huawei HarmonyOS
- CVE-2025-48909Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect service confidentialiHuawei HarmonyOS
- CVE-2025-5018Hive Support <= 1.2.5 - Authenticated (Subscriber+) Missing Authorization via hs_update_ai_chat_settings and hive_lite_support_get_all_binboxhivesupport Hive Support | AI-Powered Help Desk, Live Chat…
- CVE-2025-48906Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability.Huawei HarmonyOS
- CVE-2025-48905Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to Huawei HarmonyOS
- CVE-2025-48903Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.Huawei HarmonyOS
- CVE-2023-2921Short URL <= 1.6.8 - Subscriber+ SQLiShort URL
Medium, low and unrated 240
- CVE-2025-49128Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocationFasterXML jackson-core · com.fasterxml.jackson.core:jackson…
- CVE-2025-5797code-projects Laundry System insert_type.php cross site scriptingcode-projects Laundry System
- CVE-2025-5796code-projects Laundry System edit_type.php cross site scriptingcode-projects Laundry System
- CVE-2025-49011SpiceDB checks involving relations with caveats can result in no permission when permission is expectedauthzed spicedb · github.com/authzed/spicedb
- CVE-2025-5784PHPGurukul Employee Record Management System myexp.php sql injectionPHPGurukul Employee Record Management System
- CVE-2025-22482Qsync CentralQNAP Systems Qsync Central
- CVE-2024-50406License CenterQNAP Systems License Center
- CVE-2024-56805QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2024-13088QHoraQNAP Systems QuRouter
- CVE-2024-13087QHoraQNAP Systems QuRouter
- CVE-2025-22490File Station 5QNAP Systems File Station
- CVE-2025-29871File Station 5QNAP Systems File Station
- CVE-2025-29873File Station 5QNAP Systems File Station
- CVE-2025-29876File Station 5QNAP Systems File Station
- CVE-2025-29877File Station 5QNAP Systems File Station
- CVE-2025-5783PHPGurukul Employee Record Management System editmyexp.php sql injectionPHPGurukul Employee Record Management System
- CVE-2025-5749WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass VulnerabilityWOLFBOX Level 2 EV Charger
- CVE-2025-5751WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass VulnerabilityWOLFBOX Level 2 EV Charger
- CVE-2025-5782PHPGurukul Employee Record Management System resetpassword.php sql injectionPHPGurukul Employee Record Management System
- CVE-2025-5780code-projects Patient Record Management System view_dental.php sql injectioncode-projects Patient Record Management System
- CVE-2025-5779code-projects Patient Record Management System birthing.php sql injectioncode-projects Patient Record Management System
- CVE-2025-57781000 Projects ABC Courier Management System admin sql injection1000 Projects ABC Courier Management System
- CVE-2025-0620Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb sessionsamba · Red Hat Enterprise Linux +1
- CVE-2025-5766code-projects Laundry System cross-site request forgerycode-projects Laundry System
- CVE-2025-49419WordPress Foxit eSign for WordPress plugin <= 2.0.3 - Other Vulnerability Type Vulnerabilityesigngenie Foxit eSign for WordPress
- CVE-2025-49427WordPress Abbie Expander plugin <= 1.0.1 - Cross Site Scripting (XSS) VulnerabilityRyan Burnette Abbie Expander
- CVE-2025-49429WordPress Video Embeds plugin <= 0.1.1 - Cross Site Scripting (XSS) VulnerabilityRyan Burnette Video Embeds
- CVE-2025-49435WordPress Wp Easy Allopass plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) VulnerabilityHasina77 Wp Easy Allopass
- CVE-2025-49439WordPress Atelier Create CV plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilitymariusz88atelierweb Atelier Create CV
- CVE-2025-49440WordPress WP Security Master plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) VulnerabilityVuong Nguyen WP Security Master
- CVE-2025-49441WordPress Interactive Regional Map of Florida plugin <= 1.0 - Broken Access Control VulnerabilityWP Map Plugins Interactive Regional Map of Florida
- CVE-2025-49442WordPress Simple Nested Menu plugin <= 1.0 - Cross Site Scripting (XSS) VulnerabilityMostafa Shahiri Simple Nested Menu
- CVE-2025-49443WordPress Bacon Ipsum plugin <= 2.4 - Cross Site Scripting (XSS) VulnerabilityChris McCoy Bacon Ipsum
- CVE-2025-49445WordPress Interactive UK Regional Map plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityWP Map Plugins Interactive UK Regional Map
- CVE-2025-49446WordPress Admin Notes plugin <=1.1 - Cross Site Request Forgery (CSRF) Vulnerabilityminhlaobao Admin Notes
- CVE-2025-49449WordPress Interactive Regional Map of Africa plugin <= 1.0 - Cross Site Request Forgery (CSRF) VulnerabilityWP Map Plugins Interactive Regional Map of Africa
- CVE-2025-49450WordPress SEPA Girocode plugin <= 0.5.1 - Cross Site Scripting (XSS) Vulnerabilitymhallmann SEPA Girocode
- CVE-2023-25997WordPress Sola Support Ticket <= 3.17 - Arbitrary Content Deletion VulnerabilitySolaPlugins Sola Support Ticket
- CVE-2023-26000WordPress Bang tinh vay <= 1.0.1 - Cross Site Scripting (XSS) Vulnerabilityhanhdo205 Bang tinh vay
- CVE-2023-26001WordPress Next Event Calendar <= 1.2 - Cross Site Scripting (XSS) VulnerabilityMarchetti Design Next Event Calendar
- CVE-2023-26002WordPress 6Storage Rentals <= 2.19.5 - Broken Access Control Vulnerability6Storage Rentals
- CVE-2025-23969WordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerabilitywhassan KI Live Video Conferences
- CVE-2025-23971WordPress KI Live Video Conferences plugin <= 5.5.15 - Broken Access Control Vulnerabilitywhassan KI Live Video Conferences
- CVE-2025-24762WordPress TicketBAI Facturas para WooCommerce plugin <= 3.45 - Broken Access Control vulnerabilityfacturaone TicketBAI Facturas para WooCommerce
- CVE-2025-24763WordPress bbPress API plugin <= 1.0.14 - Broken Access Control VulnerabilityPascal Casier bbPress API
- CVE-2025-24772WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Request Forgery (CSRF) VulnerabilitycmsMinds Pay with Contact Form
- CVE-2025-24776WordPress Responsive Flipbooks plugin <= 1.0 - Broken Access Control Vulnerabilitycodelobster Responsive Flipbooks
- CVE-2025-24778WordPress No Spam At All plugin <= 1.3 - Broken Access Control VulnerabilityDe paragon No Spam At All
- CVE-2025-26593WordPress FastBook plugin <= 1.1 - Cross Site Request Forgery (CSRF) VulnerabilityFasterThemes FastBook
- CVE-2025-27334WordPress Simple Google Static Map plugin <= 1.0.1 - Cross Site Scripting (XSS) VulnerabilityÁngel C. Simple Google Static Map
- CVE-2025-27359WordPress WP Media File Type Manager plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerabilitySeerox WP Media File Type Manager
- CVE-2025-27360WordPress Quick Event Calendar plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) VulnerabilityWP Corner Quick Event Calendar
- CVE-2025-28952WordPress CubePoints plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) VulnerabilityJonathan Lau CubePoints
- CVE-2025-28984WordPress Subscription Renewal Reminders for WooCommerce plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerabilitystorepro Subscription Renewal Reminders for WooCommerce
- CVE-2025-28985WordPress Elastic Email Subscribe Form plugin <= 1.2.2 - Broken Access Control VulnerabilityElastic Email Subscribe Form
- CVE-2025-28989WordPress Read More Login plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerabilityarildur Read More Login
- CVE-2025-28994WordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerabilityviralloops Viral Loops WP Integration
- CVE-2025-28995WordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerabilityviralloops Viral Loops WP Integration
- CVE-2025-28996WordPress GPP Slideshow plugin <= 1.3.5 - Broken Access Control VulnerabilityThad Allender GPP Slideshow
- CVE-2025-28997WordPress WP AutoKeyword plugin <= 1.0 - Broken Access Control VulnerabilityEXEIdeas International WP AutoKeyword
- CVE-2025-29003WordPress The Holiday Calendar plugin <= 1.18.2.1 - Cross Site Scripting (XSS) Vulnerabilitymva7 The Holiday Calendar
- CVE-2025-29005WordPress HR Management Lite plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerabilityWeblizar - WordPress Themes & Plugin HR Management Lite
- CVE-2025-29006WordPress Direct Checkout for WooCommerce Lite plugin <= 1.0.3 - Broken Access Control Vulnerabilitycentangle Direct Checkout for WooCommerce Lite
- CVE-2025-29008WordPress SocialMark plugin <= 2.0.7 - Server Side Request Forgery (SSRF) VulnerabilityShawonPro SocialMark
- CVE-2025-29010WordPress Behance Portfolio Manager plugin <= 1.7.5 - Broken Access Control vulnerabilityeleopard Behance Portfolio Manager
- CVE-2025-29011WordPress YouTube Simple Gallery plugin <= 2.2.0 - Cross Site Scripting (XSS) VulnerabilityCHR Designer YouTube Simple Gallery
- CVE-2025-29013WordPress Custom Category/Post Type Post order plugin <= 1.6.0 - Broken Access Control Vulnerabilityfaaiq Custom Category/Post Type Post order
- CVE-2025-30624WordPress WordLift plugin <= 3.54.4 - Broken Access Control VulnerabilityWordLift
- CVE-2025-30625WordPress AppBanners plugin <= 1.5.14 - Cross Site Scripting (XSS) VulnerabilityMatt Pramschufer AppBanners
- CVE-2025-30627WordPress Elegant Visitor Counter plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerabilityregolithsjk Elegant Visitor Counter
- CVE-2025-30629WordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerabilityCodehaveli Bitly URL Shortener
- CVE-2025-30630WordPress Global Translator plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerabilitypozzad Global Translator
- CVE-2025-30632WordPress Global Translator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) Vulnerabilitypozzad Global Translator
- CVE-2025-30634WordPress WP Featured Content Slider plugin <= 2.6 - Cross Site Scripting (XSS) VulnerabilityIWEBIX WP Featured Content Slider
- CVE-2025-30636WordPress Accessibility Suite plugin <= 4.19 - Broken Access Control VulnerabilityAbility Accessibility Suite
- CVE-2025-30637WordPress Booking Ultra Pro plugin <= 1.1.20 - Cross Site Scripting (XSS) VulnerabilityDeetronix Booking Ultra Pro
- CVE-2025-30638WordPress Powie's Uptime Robot plugin <= 0.9.7 - Cross Site Scripting (XSS) VulnerabilityPowieT Powie's Uptime Robot
- CVE-2025-30927WordPress Wordapp plugin <= 1.7.0 - Broken Access Control VulnerabilityWordapp Team Wordapp
- CVE-2025-30928WordPress WP Biographia plugin <= 4.0.0 - Cross Site Scripting (XSS) Vulnerabilityvicchi WP Biographia
- CVE-2025-30930WordPress ACF: Yandex Maps Field plugin <= 1.1 - Cross Site Scripting (XSS) VulnerabilityUnreal Themes ACF: Yandex Maps Field
- CVE-2025-30931WordPress «Подсказки» от DaData.ru plugin <= 1.0.6 - Cross Site Scripting (XSS) VulnerabilityShamil Shafeev «Подсказки» от DaData.ru
- CVE-2025-30932WordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control VulnerabilityWP Compress for MainWP
- CVE-2025-30934WordPress 診断ジェネレータ作成プラグイン plugin <= 1.4.16 - Broken Access Control VulnerabilityOLIVESYSTEM 診断ジェネレータ作成プラグイン
- CVE-2025-30935WordPress Contact Form plugin <= 2.0.12 - Cross Site Scripting (XSS) VulnerabilityNickDuncan Contact Form
- CVE-2025-30937WordPress Responsify WP plugin <= 1.9.11 - Cross Site Scripting (XSS) Vulnerabilitystefanledin Responsify WP
- CVE-2025-30938WordPress Broadly for WordPress plugin <= 3.0.2 - Cross Site Scripting (XSS) VulnerabilityBroadly for WordPress
- CVE-2025-30939WordPress IFrame Widget plugin <= 4.1 - Cross Site Scripting (XSS) VulnerabilityDebashish IFrame Widget
- CVE-2025-30940WordPress Melipayamak plugin <= 2.2.12 - Cross Site Scripting (XSS) VulnerabilityMelipayamak
- CVE-2025-30941WordPress Pinterest Verify Meta Tag plugin <= 1.3 - Cross Site Scripting (XSS) VulnerabilityMarvie Pons Pinterest Verify Meta Tag
- CVE-2025-30942WordPress Post Custom Templates Lite plugin <= 1.14 - Cross Site Scripting (XSS) VulnerabilityOTWthemes Post Custom Templates Lite
- CVE-2025-30945WordPress Taskbuilder plugin <= 4.0.7 - Broken Access Control VulnerabilityTaskbuilder
- CVE-2025-30946WordPress Custom Bulk/Quick Edit plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) VulnerabilityMichael Cannon Custom Bulk/Quick Edit
- CVE-2025-30948WordPress Layouts for Elementor plugin <= 1.11 - Cross Site Request Forgery (CSRF) VulnerabilityGiraphix Creative Layouts for Elementor
- CVE-2025-30950WordPress All Currencies for WooCommerce plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityWP Wham All Currencies for WooCommerce
- CVE-2025-30951WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) VulnerabilityStiofan BlockStrap Page Builder - Bootstrap Blocks
- CVE-2025-30952WordPress Nexa Blocks plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerabilitywpdive Nexa Blocks
- CVE-2025-30953WordPress WP Gravity Forms Salesforce plugin <= 1.4.7 - Open Redirection VulnerabilityCRM Perks WP Gravity Forms Salesforce
- CVE-2025-30954WordPress WP Gravity Forms Constant Contact Plugin <= 1.1.0 - Open Redirection VulnerabilityCRM Perks WP Gravity Forms Constant Contact Plugin
- CVE-2025-30956WordPress Booqable Rental plugin <= 2.4.25 - Cross Site Request Forgery (CSRF) vulnerabilityBooqable Rental Software Booqable Rental
- CVE-2025-30957WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control VulnerabilityBuddyDev Activity Plus Reloaded for BuddyPress
- CVE-2025-30958WordPress onOffice for WP-Websites plugin <= 6.5.1 - Broken Access Control vulnerabilityonOffice for WP-Websites
- CVE-2025-30968WordPress Advanced Post List plugin <= 0.5.6.2 - Cross Site Request Forgery (CSRF) Vulnerabilityjokerbr313 Advanced Post List
- CVE-2025-30974WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerabilityAkhtarujjaman Shuvo Post Grid Master
- CVE-2025-30976WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerabilitywpdive Nexa Blocks
- CVE-2025-30977WordPress Chaport <= 1.1.6 - Cross Site Scripting (XSS) VulnerabilityChaport Live Chat Chaport
- CVE-2025-30978WordPress Slack Notifications by dorzki plugin <= 2.0.7 - Broken Access Control VulnerabilityDor Zuberi Slack Notifications by dorzki
- CVE-2025-30980WordPress Simple Keyword to Link plugin <= 1.5 - Cross Site Request Forgery (CSRF) VulnerabilityAlessandro Piconi Simple Keyword to Link
- CVE-2025-30981WordPress WP-Recall plugin <= 16.26.14 - CSRF to Privilege Escalation vulnerabilitytggfref WP-Recall
- CVE-2025-30986WordPress Elite Video Player plugin <= 10.0.5 - Cross Site Request Forgery (CSRF) Vulnerability_CreativeMedia_ Elite Video Player
- CVE-2025-30990WordPress ThemeHunk plugin <= 1.2.0 - Broken Access Control vulnerabilityThemeHunk
- CVE-2025-30991WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) VulnerabilityShahjada WPDM – Premium Packages
- CVE-2025-30994WordPress CubeWP plugin <= 1.1.29 - Cross Site Request Forgery (CSRF) vulnerabilityImran Tauqeer CubeWP
- CVE-2025-30997WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) VulnerabilitySmartDataSoft Car Repair Services
- CVE-2025-31000WordPress Payment QR WooCommerce plugin <= 1.1.6 - Broken Access Control VulnerabilityMiguel Fuentes Payment QR WooCommerce
- CVE-2025-31025WordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) VulnerabilityBlocksera Image Hover Effects Block
- CVE-2025-49333WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerabilitywp.insider Simple Membership
- CVE-2025-49332WordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerabilitycodepeople WP Time Slots Booking Form
- CVE-2025-49329WordPress Store Locator WordPress plugin <= 1.5.2 - Arbitrary File Upload VulnerabilityAgile Logix Store Locator WordPress
- CVE-2025-49325WordPress Newspack Newsletters plugin <= 3.13.0 - Open Redirection VulnerabilityAutomattic Newspack Newsletters
- CVE-2025-49324WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control VulnerabilityPickPlugins Job Board Manager
- CVE-2025-49322WordPress 404 Page by SeedProd < 1.0.2 - Cross Site Scripting (XSS) Vulnerability404 Page by SeedProd
- CVE-2025-49320WordPress FraudLabs Pro for WooCommerce plugin <= 2.22.11 - Broken Access Control Vulnerabilityfraudlabspro FraudLabs Pro for WooCommerce
- CVE-2025-49318WordPress WPtouch plugin <= 4.3.60 - Cross Site Scripting (XSS) VulnerabilityWPtouch
- CVE-2025-49317WordPress WP Page Loading plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) VulnerabilityNTC WP Page Loading
- CVE-2025-49314WordPress BRW plugin <= 1.8.6 - Cross Site Scripting (XSS) Vulnerabilityovatheme BRW
- CVE-2025-49311WordPress The Events Calendar Countdown Addon plugin <= 1.4.9 - Cross Site Scripting (XSS) VulnerabilityCoolHappy The Events Calendar Countdown Addon
- CVE-2025-49310WordPress Frontend Dashboard plugin <= 2.2.8 - Cross Site Scripting (XSS) VulnerabilityM A Vinoth Kumar Frontend Dashboard
- CVE-2025-49309WordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) VulnerabilityHT Plugins HT Team Member
- CVE-2025-49306WordPress WP Social Widget plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerabilitycatchsquare WP Social Widget
- CVE-2025-49305WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) VulnerabilityimpleCode Product Catalog Simple
- CVE-2025-49304WordPress Search with Typesense plugin <= 2.0.10 - Cross Site Scripting (XSS) VulnerabilityCodeManas Search with Typesense
- CVE-2025-49301WordPress Greenshift plugin <= 11.5.5 - Cross Site Scripting (XSS) Vulnerabilitywpsoul Greenshift
- CVE-2025-49299WordPress WebHotelier plugin <= 1.9.2 - Cross Site Scripting (XSS) VulnerabilityWPlugged.com WebHotelier
- CVE-2025-49298WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) VulnerabilityBastien Ho Event post
- CVE-2025-49294WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerabilityCodeRevolution Crawlomatic Multisite Scraper Post Generator
- CVE-2025-49293WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control VulnerabilityCodeRevolution Crawlomatic Multisite Scraper Post Generator
- CVE-2025-49292WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing VulnerabilityCozmoslabs Profile Builder
- CVE-2025-49291WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerabilitycodepeople Calculated Fields Form
- CVE-2025-49289WordPress PDF for WPForms plugin <= 5.5.0 - Broken Access Control Vulnerabilityadd-ons.org PDF for WPForms
- CVE-2025-49287WordPress Product Feed for WooCommerce plugin <= 2.2.8 - Broken Access Control VulnerabilityWebToffee Product Feed for WooCommerce
- CVE-2025-49286WordPress WP Table Builder plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) VulnerabilityWP Table Builder
- CVE-2025-49285WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) VulnerabilityWP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy C…
- CVE-2025-49284WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerabilitywp-buy WP Maintenance Mode & Site Under Construction
- CVE-2025-49283WordPress Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) VulnerabilityMatthias Nordwig Anti-spam, Spam protection, ReCaptcha for…
- CVE-2025-49273WordPress WP Tools plugin <= 5.24 - Cross Site Request Forgery (CSRF) Vulnerabilitysminozzi WP Tools
- CVE-2025-49272WordPress Trinity Audio plugin <= 5.20.0 - Broken Access Control Vulnerabilitysergiotrinity Trinity Audio
- CVE-2025-49270WordPress WP-CRM System plugin <= 3.4.2 - Broken Access Control VulnerabilityMario Peshev WP-CRM System
- CVE-2025-49269WordPress Market Exporter plugin <= 2.0.22 - Cross Site Request Forgery (CSRF) VulnerabilityAnton Vanyukov Market Exporter
- CVE-2025-49268WordPress Verge3D plugin <= 4.9.4 - Broken Access Control VulnerabilitySoft8Soft Verge3D
- CVE-2025-49250WordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerabilitycmoreira Team Showcase
- CVE-2025-49248WordPress Team Showcase plugin < 25.05.13 - Broken Access Control Vulnerabilitycmoreira Team Showcase
- CVE-2025-49246WordPress Testimonials Showcase plugin <= 1.9.16 - Broken Access Control Vulnerabilitycmoreira Testimonials Showcase
- CVE-2025-49244WordPress Shortcodes Ultimate plugin <= 7.3.5 - Cross Site Scripting (XSS) VulnerabilityVova Shortcodes Ultimate
- CVE-2025-49243WordPress ShiftNav – Responsive Mobile Menu plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerabilitysevenspark ShiftNav – Responsive Mobile Menu
- CVE-2025-49242WordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerabilitysevenspark Bellows Accordion Menu
- CVE-2025-49241WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerabilitybobbingwide oik
- CVE-2025-49240WordPress DocsPress plugin <= 2.5.2 - Broken Access Control VulnerabilitynK DocsPress
- CVE-2025-49239WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.5.0 - Cross Site Request Forgery (CSRF) Vulnerabilitytychesoftwares Print Invoice & Delivery Notes for WooCommer…
- CVE-2025-49238WordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerabilityeverestthemes Everest Backup
- CVE-2025-49236WordPress Raychat plugin <= 2.1.0 - Broken Access Control VulnerabilityRaychat
- CVE-2025-49235WordPress RTMKit Addons for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerabilityRometheme RTMKit
- CVE-2025-5765code-projects Laundry System edit_laundry.php cross site scriptingcode-projects Laundry System
- CVE-2025-5764code-projects Laundry System insert_laundry.php cross site scriptingcode-projects Laundry System
- CVE-2025-5763Tenda CP3 apollo sub_F3C8C command injectionTenda CP3
- CVE-2025-5762code-projects Patient Record Management System view_hematology.php sql injectioncode-projects Patient Record Management System
- CVE-2025-41367Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLFZIV IDF and ZLF
- CVE-2025-41366CORS vulnerability in IDF and ZLFZIV IDF and ZLF
- CVE-2025-41365Code injection vulnerability in IDF and ZLFZIV IDF and ZLF
- CVE-2025-41364Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLFZIV IDF and ZLF
- CVE-2025-41363CORS vulnerability in IDF and ZLFZIV IDF and ZLF
- CVE-2025-41362Code injection vulnerability in IDF and ZLFZIV IDF and ZLF
- CVE-2025-48335WordPress Responsive Plus plugin <= 3.2.0 - Broken Access Control vulnerabilityCyberChimps Responsive Plus
- CVE-2025-48328WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityDaman Jeet Real Time Validation for Gravity Forms
- CVE-2025-49076WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerabilityPOSIMYTH The Plus Addons for Elementor Page Builder Lite
- CVE-2025-49075WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Wishlist
- CVE-2025-49074WordPress WidgetKit plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerabilityAbu Huraira Bin Aman WidgetKit
- CVE-2025-49068WordPress Ocean Extra plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerabilityoceanwp Ocean Extra
- CVE-2025-49067WordPress Nasa Core plugin < 6.4.1 - Cross Site Scripting (XSS) vulnerabilityNasaTheme Nasa Core
- CVE-2025-5761PHPGurukul BP Monitoring Management System edit-family-member.php sql injectionPHPGurukul BP Monitoring Management System
- CVE-2025-49077WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerabilityThemeHigh Dynamic Pricing and Discount Rules
- CVE-2025-48337WordPress QuickCab plugin <= 1.3.3 - Broken Access Control vulnerabilityQuickcabWP QuickCab
- CVE-2025-5239Domain For Sale <= 3.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameterthemeatelier Domain For Sale – Sell Domains with Landing Pa…
- CVE-2025-5760Simple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Modeeskapism Simple History – Track, Log, and Audit WordPress C…
- CVE-2025-5759PHPGurukul Local Services Search Engine Management System edit-person-detail.php sql injectionPHPGurukul Local Services Search Engine Management System
- CVE-2025-5758SourceCodester Open Source Clinic Management System doctor.php sql injectionSourceCodester Open Source Clinic Management System
- CVE-2025-5757code-projects Traffic Offense Reporting System save-reported.php cross site scriptingcode-projects Traffic Offense Reporting System
- CVE-2025-5756code-projects Real Estate Property Management System EditCity.php sql injectioncode-projects Real Estate Property Management System
- CVE-2025-5755SourceCodester Open Source Clinic Management System email_config.php sql injectionSourceCodester Open Source Clinic Management System
- CVE-2025-5732code-projects Traffic Offense Reporting System cross-site request forgerycode-projects Traffic Offense Reporting System
- CVE-2025-5729code-projects Health Center Patient Record Management System birthing_record.php sql injectioncode-projects Health Center Patient Record Management System
- CVE-2025-5728SourceCodester Open Source Clinic Management System manage_website.php unrestricted uploadSourceCodester Open Source Clinic Management System
- CVE-2025-48908Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availaHuawei HarmonyOS
- CVE-2025-48910Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect availability.Huawei HarmonyOS
- CVE-2025-5686Paged Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingandreyk Paged Gallery
- CVE-2025-5563WP-Addpub <= 1.2.8 - Authenticated (Contributor+) SQL Injectioncyberscorp WP-Addpub
- CVE-2025-5541Runners Log <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingfrold Runners Log
- CVE-2025-5565Hide It <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingjason-lau Hide It
- CVE-2025-2935Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms <= 2024.7 - Cross-Site Request Forgery to Multiple Administrative Actionswebguyio Stop Spammers Classic
- CVE-2025-5538BNS Featured Category <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingcais BNS Featured Category
- CVE-2025-4964WP Online Users Stats <= 1.0.0 - Authenticated (Editor+) SQL Injection via table_name Parameterhk1993 WP Online Users Stats
- CVE-2025-4966WP Online Users Stats <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via hk_dataset_results Functionhk1993 WP Online Users Stats
- CVE-2025-5536Freemind Viewer <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingrsemeteys Freemind Viewer
- CVE-2025-5703StageShow <= 10.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via anchor Parametermalcolm-oph StageShow
- CVE-2025-5699Developer Formatter <= 2015.0.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom CSSgsaraiva Developer Formatter
- CVE-2025-5586WordPress Ajax Load More and Infinite Scroll <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parametertushargohel WordPress Ajax Load More and Infinite Scroll
- CVE-2025-5019Hive Support <= 1.2.5 - Cross-Site Request Forgery via hs_update_ai_chat_settings Functionhivesupport Hive Support | AI-Powered Help Desk, Live Chat…
- CVE-2025-5534ESV Bible Shortcode for WordPress <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingcalebzahnd ESV Bible Shortcode for WordPress
- CVE-2025-5533Knowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingajay Knowledge Base
- CVE-2024-58114Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect avHuawei HarmonyOS
- CVE-2025-48907Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability.Huawei HarmonyOS
- CVE-2025-48904Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect avaiHuawei HarmonyOS
- CVE-2025-48902Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may aHuawei HarmonyOS · Huawei EMUI
- CVE-2025-5727SourceCodester Student Result Management System Announcement Page announcement cross site scriptingSourceCodester Student Result Management System
- CVE-2025-5726SourceCodester Student Result Management System Division System Page division-system cross site scriptingSourceCodester Student Result Management System
- CVE-2025-5725SourceCodester Student Result Management System Grading System Page grading-system cross site scriptingSourceCodester Student Result Management System
- CVE-2025-5724SourceCodester Student Result Management System Subjects Page subjects cross site scriptingSourceCodester Student Result Management System
- CVE-2025-1777BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via ux_cb_page_options_saveSeaTheme BM Content Builder
- CVE-2025-1778Art Theme <= 3.12.2.3 - Missing Authorization to Authenticated (Subscriber+) Theme Option DeleteSeaTheme Art Theme
- CVE-2025-5723SourceCodester Student Result Management System Classes Page classes cross site scriptingSourceCodester Student Result Management System
- CVE-2025-5722SourceCodester Student Result Management System Add Academic Term terms cross site scriptingSourceCodester Student Result Management System
- CVE-2025-36513Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd..Surveillance cameras provided by i-PRO Co., Ltd.
- CVE-2025-5721SourceCodester Student Result Management System Profile Setting Page update_profile cross site scriptingSourceCodester Student Result Management System
- CVE-2025-5733Modern Events Calendar <= 7.21.9 - Information Exposurewebnus/ Modern Events Calendar Lite
- CVE-2025-5719The wallet has an authentication bypass vulnerability that allows access to specific pages.vivo Wallet
- CVE-2025-5716SourceCodester Open Source Clinic Management System login.php sql injectionSourceCodester Open Source Clinic Management System
- CVE-2024-46941SystemUI component protection settings vulnerabilityvivo SystemUI
- CVE-2025-5715Signal App Biometric Authentication missing critical step in authenticationSignal App
- CVE-2025-5714SoluçõesCoop iSoluçõesWEB Profile Information Update up.upload.php path traversalSoluçõesCoop iSoluçõesWEB
- CVE-2025-5713SoluçõesCoop iSoluçõesWEB Flow fluxos-dashboard cross site scriptingSoluçõesCoop iSoluçõesWEB
- CVE-2025-5712SourceCodester Open Source Clinic Management System appointment.php sql injectionSourceCodester Open Source Clinic Management System
- CVE-2025-5711code-projects Real Estate Property Management System InsertCity.php sql injectioncode-projects Real Estate Property Management System
- CVE-2025-5710code-projects Real Estate Property Management System InsertState.php sql injectioncode-projects Real Estate Property Management System
- CVE-2025-5709code-projects Real Estate Property Management System InsertCategory.php sql injectioncode-projects Real Estate Property Management System
- CVE-2024-56343IBM Verify Identity Access Digital Credentials denial of serviceIBM Verify Identity Access Digital Credentials
- CVE-2024-56342IBM Verify Identity Access Digital Credentials information disclosureIBM Verify Identity Access Digital Credentials
- CVE-2024-22330IBM Security Verify Governance information disclosureIBM Security Verify Governance
- CVE-2025-5708code-projects Real Estate Property Management System NewsReport.php sql injectioncode-projects Real Estate Property Management System
- CVE-2025-5707PHPGurukul Human Metapneumovirus Testing Management System registered-user-testing.php sql injectionPHPGurukul Human Metapneumovirus Testing Management System
- CVE-2025-5706PHPGurukul Human Metapneumovirus Testing Management System new-user-testing.php sql injectionPHPGurukul Human Metapneumovirus Testing Management System
- CVE-2025-49599Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow tHuawei EG8141A5 · Huawei EG8145V5 +1