CVEs published June 7, 2025
15 CVEs were published on June 7, 2025: 1 critical, 5 high.
- Published
- 15
- Critical
- 1
- High
- 5
- Medium
- 9
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- PHPGurukul Employee Record Management System
- 2
- Tenda AC9
- 2
- wpdevteam Essential Addons for Elementor – Popular Elemento…
- 2
- Christiaan Pieterse MaxiBlocks
- 1
- curl
- 1
- enituretechnology LTL Freight Quotes – Freightview Editi… +1
- 1
- heateor Social Sharing Plugin – Sassy Social Share
- 1
- magepeopleteam Event Booking Manager for WooCommerce
- 1
- moPS
- 1
- Skyvern
- 1
Critical 1
High 5
- CVE-2025-5839Tenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflowTenda AC9
- CVE-2025-5303LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameterenituretechnology LTL Freight Quotes – Freightview Editi… +1
- CVE-2025-5399WebSocket endless loopcurl
- CVE-2025-47601WordPress MaxiBlocks plugin <= 2.1.0 - Arbitrary Option Update to Privilege Escalation vulnerabilityChristiaan Pieterse MaxiBlocks
- CVE-2025-49619Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation Skyvern
Medium, low and unrated 9
- CVE-2025-5840SourceCodester Client Database Management System user_update_customer_order.php unrestricted uploadSourceCodester Client Database Management System
- CVE-2025-5838PHPGurukul Employee Record Management System adminprofile.php sql injectionPHPGurukul Employee Record Management System
- CVE-2025-5837PHPGurukul Employee Record Management System allemployees.php sql injectionPHPGurukul Employee Record Management System
- CVE-2025-5836Tenda AC9 POST Request SetIPTVCfg formSetIptv command injectionTenda AC9
- CVE-2024-9993Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widgetwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2025-5568WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingmagepeopleteam Event Booking Manager for WooCommerce
- CVE-2025-5528Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameterheateor Social Sharing Plugin – Sassy Social Share
- CVE-2024-9994Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widgetwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2025-5814Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restorationswitcorp Profiler – What Slowing Down Your WP