CVEs published June 20, 2025
221 CVEs were published on June 20, 2025: 17 critical, 48 high.
- Published
- 221
- Critical
- 17
- High
- 48
- Medium
- 152
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 23
Most affected products
- code-projects Online Shoe Store
- 12
- code-projects Simple Pizza Ordering System
- 9
- D-Link DIR-619L
- 7
- GitLab
- 6
- PHPGurukul Pre-School Enrollment System
- 6
- Campcodes Sales and Inventory System
- 4
- code-projects Hostel Management System
- 4
- PHPGurukul Directory Management System
- 4
- Mattermost · github.com/mattermost/mattermost-server +3
- 3
- PHPGurukul Emergency Ambulance Hiring Portal
- 3
Critical 17
- CVE-2025-34030sar2html OS Command Injectionsar2html
- CVE-2025-34029Edimax EW-7438RPn Mini OS Command Injection via syscmd.aspEdimax EW-7438RPn Mini
- CVE-2025-34024Edimax EW-7438RPn Mini OS Command Injection via mp.aspEdimax EW-7438RPn Mini
- CVE-2025-34022Selea Targa IP OCR-ANPR Camera Path TraversalSelea Targa IP OCR-ANPR Camera
- CVE-2025-25038MiniDVBLinux Root Command InjectionMiniDVBLinux
- CVE-2025-25037Aquatronica Controller System Complete Information DisclosureAquatronica Controller System
- CVE-2025-25034SugarCRM PHP Deserialization RCESugarCRM
- CVE-2025-49132Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Executionpterodactyl panel · pterodactyl/panel
- CVE-2024-53298Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export.Dell PowerScale OneFS
- CVE-2025-4981Path Traversal Leading to RCE by Any Authenticated Mattermost UserMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-32877An issue was discovered on COROS PACE 3 devices through 3.0808.0.
- CVE-2025-32878An issue was discovered on COROS PACE 3 devices through 3.0808.0.
- CVE-2025-32880An issue was discovered on COROS PACE 3 devices through 3.0808.0.
- CVE-2025-44635There are multiple unauthorized remote command execution vulnerabilities in the H3C ER2200G2, ERG2-450W, ERG2-1200W, ERG2-1350W, NR1200W ser
- CVE-2025-45890Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter
- CVE-2025-46179A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.
- CVE-2025-48706An issue was discovered in COROS PACE 3 through 3.0808.0.
High 48
- CVE-2025-6373D-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflowD-Link DIR-619L
- CVE-2025-6372D-Link DIR-619L formSetWizard1 stack-based overflowD-Link DIR-619L
- CVE-2025-6371D-Link DIR-619L formSetEnableWizard stack-based overflowD-Link DIR-619L
- CVE-2025-6370D-Link DIR-619L formWlanGuestSetup stack-based overflowD-Link DIR-619L
- CVE-2025-6369D-Link DIR-619L formdumpeasysetup stack-based overflowD-Link DIR-619L
- CVE-2025-6368D-Link DIR-619L formSetEmail stack-based overflowD-Link DIR-619L
- CVE-2025-6367D-Link DIR-619L formSetDomainFilter stack-based overflowD-Link DIR-619L
- CVE-2025-48945pycares has a Use-After-Free Vulnerabilityaio-libs aiodns · pycares
- CVE-2025-34023Karel IP Phone IP1211 Path TraversalKarel IP Phone IP1211
- CVE-2025-34021Selea Targa IP OCR-ANPR Camera Server-Side Request ForgerySelea Targa IP OCR-ANPR Camera
- CVE-2024-4994Cross-Site Request Forgery (CSRF) in GitLabGitLab
- CVE-2025-2443Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2025-5121Missing Authorization in GitLabGitLab
- CVE-2025-49873WordPress Elessi theme <= 6.3.9 - Cross Site Scripting (XSS) VulnerabilityNasaTheme Elessi
- CVE-2025-52772WordPress Virtual Moderator plugin <= 1.4 - Cross Site Request Forgery (CSRF) VulnerabilityAdnan Haque (a11n) Virtual Moderator
- CVE-2025-52780WordPress Logo Manager For Samandehi plugin <= 0.5 - Cross Site Request Forgery (CSRF) VulnerabilityMohammad Parsa Logo Manager For Samandehi
- CVE-2025-52781WordPress TinyNav plugin <= 1.4 - Cross Site Request Forgery (CSRF) VulnerabilityBeee TinyNav
- CVE-2025-52782WordPress Scroll UP plugin <= 2.0 - Cross Site Scripting (XSS) VulnerabilityKing Rayhan Scroll UP
- CVE-2025-52783WordPress Change Cart button Colors WooCommerce plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerabilitythemelocation Change Cart button Colors WooCommerce
- CVE-2025-52784WordPress Bluff Post plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerabilityhideoguchi Bluff Post
- CVE-2025-52789WordPress Lewe ChordPress plugin <= 4.0.1 - Cross Site Request Forgery (CSRF) to Stored XSS VulnerabilityGeorge Lewe Lewe ChordPress
- CVE-2025-52790WordPress WP-DownloadCounter plugin <= 1.01 - Cross Site Request Forgery (CSRF) Vulnerabilityr-win WP-DownloadCounter
- CVE-2025-52791WordPress Knowledge Base – Knowledge Base Maker plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) Vulnerabilitydevfelixmoira Knowledge Base – Knowledge Base Maker
- CVE-2025-52792WordPress WP User Stylesheet Switcher plugin <= v2.2.0 - Cross Site Request Forgery (CSRF) Vulnerabilityvgstef WP User Stylesheet Switcher
- CVE-2025-52793WordPress Esselink.nu Settings plugin <= 4.5 - Cross Site Request Forgery (CSRF) vulnerabilityEsselink.nu Settings
- CVE-2025-52794WordPress Creative Contact Form plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) VulnerabilityCreative-Solutions Creative Contact Form
- CVE-2025-52795WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Request Forgery (CSRF) vulnerabilityaharonyan WP Front User Submit / Front Editor
- CVE-2025-52802WordPress Import YouTube videos as WP Posts plugin <= 2.1 - Broken Access Control Vulnerabilityenguerranws Import YouTube videos as WP Posts
- CVE-2025-52821WordPress Video List Manager plugin <= 1.7 - SQL Injection Vulnerabilitythanhtungtnt Video List Manager
- CVE-2025-52822WordPress WP Roadmap plugin <= 2.1.3 - SQL Injection vulnerabilityIqonic Design WP Roadmap
- CVE-2025-52825WordPress Real Estate Manager plugin <= 7.3 - Cross Site Request Forgery (CSRF) VulnerabilityRameez Iqbal Real Estate Manager
- CVE-2025-52715WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion VulnerabilityRadiusTheme Classified Listing
- CVE-2025-52708WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion VulnerabilityRealMag777 HUSKY
- CVE-2025-3319IBM Spectrum Protect Server authentication bypassIBM Spectrum Protect Server
- CVE-2025-6337TOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflowTOTOLINK A3002R · TOTOLINK A3002RU
- CVE-2025-6336TOTOLINK EX1200T HTTP POST Request formTmultiAP buffer overflowTOTOLINK EX1200T
- CVE-2025-38083net_sched: prio: fix a race in prio_tune()Linux
- CVE-2025-4102Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File UploadThe Beaver Builder Team Beaver Builder Plugin
- CVE-2025-6334D-Link DIR-867 Query String strncpy stack-based overflowD-Link DIR-867
- CVE-2025-6328D-Link DIR-815 hedwig.cgi sub_403794 stack-based overflowD-Link DIR-815
- CVE-2025-6302TOTOLINK EX1200T cstecgi.cgi setStaticDhcpConfig stack-based overflowTOTOLINK EX1200T
- CVE-2025-49715Dynamics 365 FastTrack Implementation Assets Information Disclosure VulnerabilityMicrosoft Dynamics 365 FastTrack Implementation
- CVE-2025-6292D-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflowD-Link DIR-825
- CVE-2025-6291D-Link DIR-825 HTTP POST Request do_file stack-based overflowD-Link DIR-825
- CVE-2025-32879An issue was discovered on COROS PACE 3 devices through 3.0808.0.
- CVE-2025-44203In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs
- CVE-2025-45331brplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the br_dagens_handle_once function of its data processing module
- CVE-2025-48705An issue was discovered in COROS PACE 3 through 3.0808.0.
Medium, low and unrated 156
- CVE-2025-6365HobbesOSR Kitten pgtable.h set_pte_at resource consumptionHobbesOSR Kitten
- CVE-2025-6364code-projects Simple Pizza Ordering System adduser-exec.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6363code-projects Simple Pizza Ordering System adding-exec.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2023-5600Missing Authorization in GitLabGitLab
- CVE-2025-6362code-projects Simple Pizza Ordering System editpro.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6361code-projects Simple Pizza Ordering System adds.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6360code-projects Simple Pizza Ordering System portal.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6359code-projects Simple Pizza Ordering System cashconfirm.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2024-4025Inefficient Regular Expression Complexity in GitLabGitLab
- CVE-2025-6358code-projects Simple Pizza Ordering System saveorder.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6357code-projects Simple Pizza Ordering System paymentportal.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6356code-projects Simple Pizza Ordering System addmem.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-52484RISC Zero zkVM Underconstrained Vulnerabilityrisc0 · risc0-zkvm +1
- CVE-2025-6355SourceCodester Online Hotel Reservation System execeditroom.php sql injectionSourceCodester Online Hotel Reservation System
- CVE-2025-48059PowSyBl Core Contains a Polynomial ReDoS in RegexCriterionpowsybl-core · com.powsybl:powsybl-iidm-criteria +1
- CVE-2025-6354code-projects Online Shoe Store customer_signup.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6353code-projects Responsive Blog search.php cross site scriptingcode-projects Responsive Blog
- CVE-2025-5416Keycloak-core: keycloak environment informationRed Hat Build of Keycloak
- CVE-2025-6352code-projects Automated Voting System Backend vote.php direct requestcode-projects Automated Voting System
- CVE-2025-6351itsourcecode Employee Record Management System editprofile.php sql injectionitsourcecode Employee Record Management System
- CVE-2025-6193Trustyai-explainability: command injection via lmevaljob crtrustyAI · Red Hat OpenShift AI
- CVE-2025-6347code-projects Responsive Blog pageViewMembers.php cross site scriptingcode-projects Responsive Blog
- CVE-2025-49964WordPress ClipLink plugin <= 1.1 - Cross Site Request Forgery (CSRF) Vulnerabilityindgeek ClipLink
- CVE-2025-49965WordPress PixelBeds Channel Manager and Hotel Booking Engine plugin <= 1.0 - Cross Site Request Forgery (CSRF) VulnerabilityOganro PixelBeds Channel Manager and Hotel Booking Engine
- CVE-2025-49966WordPress Oganro Travel Portal Search Widget for HotelBeds APITUDE API plugin <= 1.0 - Cross Site Request Forgery (CSRF) VulnerabilityOganro Travel Portal Search Widget for HotelBeds APITUDE API
- CVE-2025-49967WordPress Live Sports Streamthunder plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerabilitymarcusjansen Live Sports Streamthunder
- CVE-2025-49968WordPress XML Travel Portal Widget plugin <= 2.0 - Cross Site Request Forgery (CSRF) VulnerabilityOganro XML Travel Portal Widget
- CVE-2025-49969WordPress Zara 4 Image Compression plugin <= 1.2.17.2 - Broken Access Control VulnerabilityZara 4 Image Compression
- CVE-2025-49970WordPress Hello FSE Blog theme <= 1.0.6 - Broken Access Control Vulnerabilitysparklewpthemes Hello FSE Blog
- CVE-2025-49971WordPress eDS Responsive Menu plugin <= 1.2 - Broken Access Control VulnerabilityaThemeArt Translations eDS Responsive Menu
- CVE-2025-49972WordPress TM Replace Howdy plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) VulnerabilityDavid Wood TM Replace Howdy
- CVE-2025-49973WordPress Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes plugin <= 1.0.10 - Broken Access Control VulnerabilityGrandPlugins Image Sizes Controller, Create Custom Image Si…
- CVE-2025-49974WordPress UpStream: a Project Management Plugin for WordPress plugin <= 2.1.1 - Broken Access Control Vulnerabilityupstreamplugin UpStream: a Project Management Plugin for Wo…
- CVE-2025-49975WordPress JobWP plugin <= 2.4.0 - Cross Site Request Forgery (CSRF) VulnerabilityHossni Mubarak JobWP
- CVE-2025-49976WordPress WANotifier plugin <= 2.7.12 - Broken Access Control vulnerabilityWANotifier Notifier
- CVE-2025-49977WordPress WP Inventory Manager plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerabilityWP Inventory Manager
- CVE-2025-49978WordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerabilityeyecix JobSearch
- CVE-2025-49979WordPress Media Hygiene plugin <= 4.0.1 - Broken Access Control vulnerabilityslui Media Hygiene
- CVE-2025-49980WordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control VulnerabilityWP Event Manager WP User Profile Avatar
- CVE-2025-49981WordPress User Roles and Capabilities plugin <= 1.2.6 - Broken Access Control Vulnerabilitymahabub81 User Roles and Capabilities
- CVE-2025-49982WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerabilityaguilatechnologies WP Customer Area
- CVE-2025-49983WordPress WPThumb plugin <= 0.10 - Server Side Request Forgery (SSRF) VulnerabilityJoe Hoyle WPThumb
- CVE-2025-49984WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerabilityblubrry PowerPress Podcasting
- CVE-2025-49985WordPress Auto Upload Images plugin <= 3.3.2 - Server Side Request Forgery (SSRF) VulnerabilityAli Irani Auto Upload Images
- CVE-2025-49986WordPress Video List Manager plugin <= 1.7 - Broken Access Control Vulnerabilitythanhtungtnt Video List Manager
- CVE-2025-49987WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control VulnerabilityWPFactory CRM ERP Business Solution
- CVE-2025-49988WordPress Contact Form 7 AWeber Extension plugin <= 0.1.40 - Broken Access Control vulnerabilityRenzo Johnson Contact Form 7 AWeber Extension
- CVE-2025-49989WordPress App Builder plugin <= 5.5.6 - Broken Access Control vulnerabilityApp Cheap App Builder
- CVE-2025-49990WordPress ContentStudio plugin <= 1.3.7 - Broken Access Control vulnerabilityContentstudio
- CVE-2025-49991WordPress WP-Recall plugin <= 16.26.14 - Broken Access Control Vulnerabilitytggfref WP-Recall
- CVE-2025-49993WordPress Cookie-Script.com plugin <= 1.2.1 - Broken Access Control Vulnerabilitycsarturas Cookie-Script.com
- CVE-2025-49995WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerabilitydFactory Download Attachments
- CVE-2025-49996WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.4 - Broken Access Control vulnerabilityosama.esh WP Visitor Statistics
- CVE-2025-49997WordPress Giveaways and Contests by RafflePress plugin <= 1.12.18 - Broken Access Control + CSRF VulnerabilitySyed Balkhi Giveaways and Contests by RafflePress
- CVE-2025-49998WordPress WooCommerce Fortnox Integration plugin <= 4.5.5 - Broken Access Control VulnerabilityWetail WooCommerce Fortnox Integration
- CVE-2025-50008WordPress WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily plugin <= 1.2.4.5 - Broken Access Control Vulnerabilitycscode WooCommerce Manager – Customize and Control Cart pag…
- CVE-2025-50009WordPress Kata Plus plugin <= 1.5.3 - Broken Access Control VulnerabilityClimax Themes Kata Plus
- CVE-2025-50010WordPress Zapier for WordPress plugin <= 1.5.2 - Broken Access Control VulnerabilityZapier for WordPress
- CVE-2025-50011WordPress plugin Recipes manager - WPH <=1.0.4 - Cross Site Scripting (XSS) VulnerabilityFélix Martínez Recipes manager - WPH
- CVE-2025-50012WordPress Inventory Presser plugin <= 15.2.6 - Cross Site Scripting (XSS) vulnerabilityfridaysystems Inventory Presser
- CVE-2025-50013WordPress CSV Importer Improved plugin <= 0.6.1 - Cross Site Scripting (XSS) VulnerabilityJason Judge CSV Importer Improved
- CVE-2025-50014WordPress PDPA Consent for Thailand plugin <= 1.1.1 - Cross Site Scripting (XSS) Vulnerabilityiamapinan PDPA Consent for Thailand
- CVE-2025-50015WordPress Hand Talk plugin <= 6.1 - Cross Site Scripting (XSS) VulnerabilityRodrigo Bastos Hand Talk
- CVE-2025-50016WordPress IP Based Login plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerabilitybrijeshk89 IP Based Login
- CVE-2025-50017WordPress WP Voting Contest plugin <= 5.8 - Cross Site Scripting (XSS) VulnerabilityMatt WP Voting Contest
- CVE-2025-50018WordPress Tealium plugin <= 2.1.20 - Cross Site Scripting (XSS) VulnerabilityTealium
- CVE-2025-50019WordPress Simple Sticky Footer plugin <= 1.3.5 - Cross Site Scripting (XSS) VulnerabilitySandor Kovacs Simple Sticky Footer
- CVE-2025-50020WordPress RDFa Breadcrumb plugin <= 2.3 - Cross Site Scripting (XSS) VulnerabilityNitin Yawalkar RDFa Breadcrumb
- CVE-2025-50021WordPress Better Random Redirect plugin <= 1.3.20 - Cross Site Scripting (XSS) VulnerabilityRobert Peake Better Random Redirect
- CVE-2025-50022WordPress WP-FB-AutoConnect plugin <= 4.6.4 - Cross Site Scripting (XSS) VulnerabilityJK WP-FB-AutoConnect
- CVE-2025-50023WordPress CodePen Embed Block plugin <= 1.2.0 - Cross Site Scripting (XSS) VulnerabilityChris Coyier CodePen Embed Block
- CVE-2025-50024WordPress ATP Call Now plugin <= 1.0.3 - Cross Site Scripting (XSS) VulnerabilityTruong Thanh ATP Call Now
- CVE-2025-50025WordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerabilitycodepeople CP Polls
- CVE-2025-50026WordPress Spoki plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerabilitySpoki
- CVE-2025-50027WordPress Login/Signup Popup plugin <= 2.9.4 - Cross Site Scripting (XSS) Vulnerabilityxootix Login/Signup Popup
- CVE-2025-50030WordPress Spark Multipurpose theme <= 1.0.7 - Cross Site Scripting (XSS) Vulnerabilitysparklewpthemes Spark Multipurpose
- CVE-2025-50033WordPress Fitness Park theme <= 1.1.1 - Cross Site Scripting (XSS) Vulnerabilitysparklewpthemes Fitness Park
- CVE-2025-50034WordPress Enhanced Blocks – Page Builder Blocks for Gutenberg plugin <= 1.4.1 - Broken Access Control VulnerabilityMahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks f…
- CVE-2025-50035WordPress Fyrebox Quizzes plugin <= 3.1 - Cross Site Scripting (XSS) VulnerabilityCyrilG Fyrebox Quizzes
- CVE-2025-50036WordPress Mailing Group Listserv plugin <= 3.0.5 - Cross Site Request Forgery (CSRF) VulnerabilityYamna Khawaja Mailing Group Listserv
- CVE-2025-50037WordPress Buying Buddy IDX CRM plugin <= 2.3.0 - Cross Site Scripting (XSS) VulnerabilityBuying Buddy IDX CRM
- CVE-2025-50038WordPress Anant Addons for Elementor plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerabilityanantaddons Anant Addons for Elementor
- CVE-2025-50041WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) VulnerabilityWP Engine Gutenberg Blocks – ACF Blocks Suite
- CVE-2025-50042WordPress WP Register Profile With Shortcode plugin <= 3.6.3 - Cross Site Scripting (XSS) Vulnerabilityaviplugins.com WP Register Profile With Shortcode
- CVE-2025-50043WordPress Code Engine plugin <= 0.3.2 - Cross Site Scripting (XSS) VulnerabilityJordy Meow Code Engine
- CVE-2025-50044WordPress Real Estate Manager plugin <= 7.3 - Cross Site Request Forgery (CSRF) VulnerabilityRameez Iqbal Real Estate Manager
- CVE-2025-50045WordPress Related Products Manager for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) VulnerabilityProWCPlugins Related Products Manager for WooCommerce
- CVE-2025-50046WordPress WPComplete plugin <= 2.9.5 - Cross Site Scripting (XSS) VulnerabilityStellarWP WPComplete
- CVE-2025-50047WordPress Sitekit plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerabilitywebvitaly Sitekit
- CVE-2025-50048WordPress Automatically Hierarchic Categories in Menu plugin <= 2.0.9 - Cross Site Scripting (XSS) VulnerabilityAtakan Au Automatically Hierarchic Categories in Menu
- CVE-2025-50049WordPress Modern Footnotes plugin <= 1.4.19 - Cross Site Scripting (XSS) Vulnerabilityprismtechstudios Modern Footnotes
- CVE-2025-50050WordPress Jobs for WordPress plugin <= 2.7.14 - Cross Site Scripting (XSS) VulnerabilityBlueGlass Interactive AG Jobs for WordPress
- CVE-2025-50051WordPress WP-Members plugin <= 3.5.4 - Cross Site Scripting (XSS) VulnerabilityChad Butler WP-Members
- CVE-2025-52733WordPress ANON::form embedded secure form plugin <= 1.7 - Cross Site Scripting (XSS) VulnerabilityAnonform Ab ANON::form embedded secure form
- CVE-2025-52719WordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) VulnerabilityMetagauss ProfileGrid
- CVE-2025-52713WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) VulnerabilityPost and Page Builder by BoldGrid
- CVE-2025-52711WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) VulnerabilityPost and Page Builder by BoldGrid
- CVE-2025-52710WordPress File Manager Pro plugin <= 1.8.8 - Cross Site Scripting (XSS) VulnerabilityNinja Team File Manager Pro
- CVE-2025-52707WordPress Firelight Lightbox plugin <= 2.3.16 - Cross Site Scripting (XSS) VulnerabilityFirelight Lightbox
- CVE-2025-6346SourceCodester Advance Charity Management System fundDetails.php sql injectionSourceCodester Advance Charity Management System
- CVE-2025-3228Unauthorized Guest user access to PlaybookMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-3227Unauthorized channel member management through playbook runsMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-6345SourceCodester My Food Recipe Add Recipe Page add-recipe.php addRecipeModal cross site scriptingSourceCodester My Food Recipe
- CVE-2025-6344code-projects Online Shoe Store contactus.php sql injectioncode-projects Online Shoe Store
- CVE-2024-7586Insertion of Sensitive Information into Log File in GitLabGitLab
- CVE-2025-32753Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used in an SQL command ('SDell PowerScale OneFS
- CVE-2025-6343code-projects Online Shoe Store admin_product.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6342code-projects Online Shoe Store admin_football.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6341code-projects School Fees Payment System cross-site request forgerycode-projects School Fees Payment System
- CVE-2025-6340code-projects School Fees Payment System branch.php cross site scriptingcode-projects School Fees Payment System
- CVE-2025-6339ponaravindb Hospital Management System func3.php sql injectionponaravindb Hospital Management System
- CVE-2025-6335DedeCMS Template dedetag.class.php command injectionDedeCMS
- CVE-2025-6333PHPGurukul Directory Management System admin-profile.php sql injectionPHPGurukul Directory Management System
- CVE-2025-6332PHPGurukul Directory Management System manage-directory.php sql injectionPHPGurukul Directory Management System
- CVE-2025-5963TCC Bypass via Dylib Injection in PostboxPostbox
- CVE-2025-5255TCC Bypass via Dylib Injection in Phoenix CodeCore.ai Phoenix Code
- CVE-2025-6331PHPGurukul Directory Management System search-directory.php sql injectionPHPGurukul Directory Management System
- CVE-2025-6330PHPGurukul Directory Management System searchdata.php sql injectionPHPGurukul Directory Management System
- CVE-2025-6329ScriptAndTools Real Estate Management System User Delete userdelete.php authorizationScriptAndTools Real Estate Management System
- CVE-2025-6323PHPGurukul Pre-School Enrollment System enrollment.php sql injectionPHPGurukul Pre-School Enrollment System
- CVE-2025-6322PHPGurukul Pre-School Enrollment System visit.php sql injectionPHPGurukul Pre-School Enrollment System
- CVE-2025-6321PHPGurukul Pre-School Enrollment System add-subadmin.php sql injectionPHPGurukul Pre-School Enrollment System
- CVE-2025-6320PHPGurukul Pre-School Enrollment System add-class.php sql injectionPHPGurukul Pre-School Enrollment System
- CVE-2025-6257Euro FxRef Currency Converter <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via currency Shortcodejoostdekeijzer Euro FxRef Currency Converter
- CVE-2025-6319PHPGurukul Pre-School Enrollment System add-teacher.php sql injectionPHPGurukul Pre-School Enrollment System
- CVE-2025-6318PHPGurukul Pre-School Enrollment System check_availability.php sql injectionPHPGurukul Pre-School Enrollment System
- CVE-2025-6317code-projects Online Shoe Store confirm.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6316code-projects Online Shoe Store admin_running.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6315code-projects Online Shoe Store cart2.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6314Campcodes Sales and Inventory System cat_update.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-6313Campcodes Sales and Inventory System cat_add.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-50054Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too laOpenVPN ovpn-dco-win
- CVE-2025-6312Campcodes Sales and Inventory System cash_transaction.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-5125Custom Post Carousels with Owl < 1.4.12 - Contributor+ Stored XSSCustom Post Carousels with Owl
- CVE-2025-6311Campcodes Sales and Inventory System account_add.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-6310PHPGurukul Emergency Ambulance Hiring Portal index.php sql injectionPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2025-6309PHPGurukul Emergency Ambulance Hiring Portal add-ambulance.php sql injectionPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2025-6308PHPGurukul Emergency Ambulance Hiring Portal bwdates-request-report-details.php sql injectionPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2025-6307code-projects Online Shoe Store edit_customer.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6306code-projects Online Shoe Store admin_index.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6305code-projects Online Shoe Store admin_feature.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6304code-projects Online Shoe Store cart.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6303code-projects Online Shoe Store contactus1.php sql injectioncode-projects Online Shoe Store
- CVE-2025-6301PHPGurukul Notice Board System Add Notice manage-notices.php cross site scriptingPHPGurukul Notice Board System
- CVE-2025-6264Velociraptor priviledge escalation via UpdateConfig artifactRapid7 Velociraptor · www.velocidex.com/golang/velociraptor
- CVE-2025-6300PHPGurukul Employee Record Management System editempeducation.php sql injectionPHPGurukul Employee Record Management System
- CVE-2025-6299TOTOLINK N150RT formWSC os command injectionTOTOLINK N150RT
- CVE-2025-6296code-projects Hostel Management System empty_rooms.php sql injectioncode-projects Hostel Management System
- CVE-2025-6295code-projects Hostel Management System allocated_rooms.php sql injectioncode-projects Hostel Management System
- CVE-2025-6294code-projects Hostel Management System contact.php sql injectioncode-projects Hostel Management System
- CVE-2025-48058PowSyBl Core contains Polynomial REDoS’espowsybl-core · com.powsybl:powsybl-commons
- CVE-2025-6293code-projects Hostel Management System contact_manager.php sql injectioncode-projects Hostel Management System
- CVE-2025-6288PHPGurukul Bus Pass Management System Profile Page admin-profile.php cross site scriptingPHPGurukul Bus Pass Management System
- CVE-2025-32875An issue was discovered in the COROS application through 3.8.12 for Android.
- CVE-2025-32876An issue was discovered on COROS PACE 3 devices through 3.0808.0.
- CVE-2025-46158An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the `setitimer` syscall