CVEs published July 18, 2025
109 CVEs were published on July 18, 2025: 13 critical, 29 high. 1 is now in CISA KEV.
- Published
- 109
- Critical
- 13
- High
- 29
- Medium
- 65
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 32
Most affected products
- Tenda FH451
- 8
- LabRedesCefetRJ WeGIA
- 4
- Mattermost · github.com/mattermost/mattermost-server +3
- 3
- Microsoft Azure Machine Learning
- 3
- wolfSSL
- 3
- b1accounting Site.pro for WooCommerce
- 2
- simogeo/filemanager
- 2
- aapanel WP Toolkit
- 1
- aaroncampbell Attachment Manager
- 1
- ajay Knowledge Base
- 1
Critical 13
- CVE-2025-7395Domain Name Validation Bypass with Apple Native Certificate ValidationwolfSSL
- CVE-2025-47158Azure DevOps Server Elevation of Privilege VulnerabilityMicrosoft Azure DevOps
- CVE-2025-49746Azure Machine Learning Elevation of Privilege VulnerabilityMicrosoft Azure Machine Learning
- CVE-2025-49747Azure Machine Learning Elevation of Privilege VulnerabilityMicrosoft Azure Machine Learning
- CVE-2025-7783Usage of unsafe random function in form-data for choosing boundaryform-data
- CVE-2025-54079WeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'LabRedesCefetRJ WeGIA
- CVE-2025-7444LoginPress Pro <= 5.0.1 - Authentication Bypass via WordPress.com OAuth providerLoginPress Pro
- CVE-2025-26855Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomlajoomcar.net Articles Calendar extension for Joomla
- CVE-2025-26854Extension - joomcar.net - SQL injection in Articles Good Search 1.0.0 - 1.2.4.0011 for Joomlajoomcar.net Articles Good Search extension for Joomla
- CVE-2025-7643Attachment Manager <= 2.1.2 - Unauthenticated Arbitrary File Deletionaaroncampbell Attachment Manager
- CVE-2025-6222WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet <= 3.2.6 - Unauthenticated Arbitrary File UploadWP Swings WooCommerce Refund And Exchange with RMA - Warran…
- CVE-2025-46001An arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary cosimogeo/filemanager
- CVE-2025-54309CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allowsCrushFTP
High 29
- CVE-2025-27210An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX.nodejs node · nodejs
- CVE-2025-27209The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash.nodejs node
- CVE-2025-7394In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for prwolfSSL
- CVE-2025-7807Tenda FH451 SafeUrlFilter fromSafeUrlFilter stack-based overflowTenda FH451
- CVE-2025-7806Tenda FH451 SafeClientFilter fromSafeClientFilter stack-based overflowTenda FH451
- CVE-2025-7805Tenda FH451 PPTPUserSetting fromPptpUserSetting stack-based overflowTenda FH451
- CVE-2025-7796Tenda FH451 PPTPDClient fromPptpUserAdd stack-based overflowTenda FH451
- CVE-2025-7795Tenda FH451 P2pListFilter fromP2pListFilter stack-based overflowTenda FH451
- CVE-2025-53762Microsoft Purview Elevation of Privilege VulnerabilityMicrosoft Purview
- CVE-2025-7794Tenda FH451 NatStaticSetting fromNatStaticSetting stack-based overflowTenda FH451
- CVE-2025-7793Tenda FH451 webtypelibrary formWebTypeLibrary stack-based overflowTenda FH451
- CVE-2025-7792Tenda FH451 SafeEmailFilter formSafeEmailFilter stack-based overflowTenda FH451
- CVE-2025-54075mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)nuxt-modules mdc · @nuxtjs/mdc
- CVE-2025-54073mcp-package-docs vulnerable to command injection in several toolssammcj mcp-package-docs · mcp-package-docs
- CVE-2025-53945apko has incorrect permission (0666) in /etc/ld.so.cache and other fileschainguard-dev apko · chainguard.dev/apko
- CVE-2025-7790D-Link DI-8100 HTTP Request menu_nat.asp stack-based overflowD-Link DI-8100
- CVE-2025-49484Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomlajoomsky.com JS Jobs component for Joomla
- CVE-2025-49485Extension - balbooa.com - SQL injection in Balbooa Forms component version 1.0.0 - 2.3.1.1 for Joomlabalbooa.com Balbooa Forms component for Joomla
- CVE-2025-49486Extension - balbooa.com - Stored XSS in Balbooa Gallery component version 1.0.0 - 2.4.0 for Joomlabalbooa.com Balbooa Gallery component for Joomla
- CVE-2025-38349eventpoll: don't decrement ep refcount while still holding the ep mutexLinux · :linux_kernel:
- CVE-2025-6023An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks.Grafana · github.com/grafana/grafana
- CVE-2025-7438MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File UploadStylemixThemes MasterStudy LMS Pro
- CVE-2025-6718B1.lt for WooCommerce <= 2.2.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Injectionb1accounting Site.pro for WooCommerce
- CVE-2025-6813aapanel WP Toolkit 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Functionaapanel WP Toolkit
- CVE-2025-3740School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Updatedasinfomedia School Management System for Wordpress
- CVE-2025-50585StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl.
- CVE-2025-50708An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat
- CVE-2025-52164Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.
- CVE-2025-52169agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.
Medium, low and unrated 67
- CVE-2025-7396Curve25519 BlindingwolfSSL
- CVE-2025-7814code-projects Food Ordering Review System signup_function.php sql injectioncode-projects Food Ordering Review System
- CVE-2025-7803descreekert wx-discuz wx.php validToken cross site scriptingdescreekert wx-discuz
- CVE-2025-7802PHPGurukul Complaint Management System complaint-search.php cross site scriptingPHPGurukul Complaint Management System
- CVE-2025-33014IBM Sterling B2B Integrator and IBM Sterling File Gateway link injectionIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2025-7801BossSoft CRM HNDCBas_customPrmSearchDtl.jsp sql injectionBossSoft CRM
- CVE-2025-7800cgpandey hotelmis HTTP GET Request admin.php cross site scriptingcgpandey hotelmis
- CVE-2025-7798Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System companyManage sql injectionBeijing Shenzhou Shihan Technology Multimedia Integrated Bu…
- CVE-2025-7797GPAC dash_client.c gf_dash_download_init_segment null pointer dereferenceGPAC
- CVE-2025-53901Wasmtime has host panic with `fd_renumber` WASIp1 functionbytecodealliance wasmtime · wasmtime +1
- CVE-2025-47995Azure Machine Learning Elevation of Privilege VulnerabilityMicrosoft Azure Machine Learning
- CVE-2025-54078WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err'LabRedesCefetRJ WeGIA
- CVE-2025-54077WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err'LabRedesCefetRJ WeGIA
- CVE-2025-54076WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e'LabRedesCefetRJ WeGIA
- CVE-2025-7791PHPGurukul Online Security Guards Hiring System search.php cross site scriptingPHPGurukul Online Security Guards Hiring System
- CVE-2025-54059melange creates SBOM files in APKs with world-writable permissionschainguard-dev melange · chainguard.dev/melange
- CVE-2025-53888RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.cRIOT-OS RIOT
- CVE-2025-7789Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hashXuxueli xxl-job · com.xuxueli:xxl-job-admin
- CVE-2025-46732OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other usersOpenCTI-Platform opencti · pycti
- CVE-2025-7788Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injectionXuxueli xxl-job
- CVE-2025-7787Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgeryXuxueli xxl-job · com.xuxueli:xxl-job-core
- CVE-2024-13175IDOR in Vidco Software's VOC TESTERVidco Software VOC TESTER
- CVE-2025-7784Org.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)keycloak · Red Hat build of Keycloak +3
- CVE-2025-7786Gnuboard g6 Post Reply qa cross site scriptingGnuboard g6
- CVE-2025-7785thinkgem JeeSite SsoController.java sso redirectthinkgem JeeSite
- CVE-2025-6227Invite token is used as part of the secure communicationMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-50126Extension - rsjoomla.com - Stored XSS vulnerability RSBlog! component 1.11.6-1.14.5 for Joomlarsjoomla.com RSBlog! component for Joomla
- CVE-2025-50058Extension - rsjoomla.com - Stored XSS vulnerability in RSDirectory! component 1.16.3-1.17.7 for Joomlarsjoomla.com RSDirectory! component for Joomla
- CVE-2025-50057Extension - rsjoomla.com - DOS vulnerability RSFiles! component 1.16.3-1.17.7 for Joomlarsjoomla.com RSFiles! component for Joomla
- CVE-2025-50056Extension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.28 for Joomlarsjoomla.com RSMail! component for Joomla
- CVE-2025-2425TOCTOU race condition vulnerability in ESET products on WindowsESET, spol. s.r.o ESET NOD32 Antivirus · ESET, spol. s.r… +9
- CVE-2025-6233Arbitrary file read by system admin via path traversalMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-6226IDOR in CreatePost API allows for timeboxed message disclosureMattermost · github.com/mattermost/mattermost-server +3
- CVE-2024-32124An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allFortinet FortiIsolator
- CVE-2024-27779An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.Fortinet FortiSandbox · Fortinet FortiIsolator
- CVE-2025-6197An open redirect vulnerability has been identified in Grafana OSS organization switching functionality.Grafana
- CVE-2025-7772Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal <= 16.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File ReadMalcure Malware Shield — Removal, Repair, Monitor
- CVE-2025-5811Listly: Listicles For WordPress <= 2.7 - Unauthenticated Arbitrary Transient Deletionmilanmk Listly: Listicles For WordPress
- CVE-2025-5800Testimonial Post type <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play Parameterjuiiee8487 Testimonial Post type
- CVE-2025-5752Vertical scroll image slideshow gallery <= 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parametergopiplus Vertical scroll image slideshow gallery
- CVE-2025-6717B1.lt for WooCommerce <= 2.2.56 - Authenticated (Subscriber+) SQL Injectionb1accounting Site.pro for WooCommerce
- CVE-2025-5767Crowdfunding for WooCommerce <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameterwpwham Crowdfunding for WooCommerce
- CVE-2025-6719Terms descriptions <= 3.4.8 - Authenticated (Admin+) Stored Cross-Site Scriptingvladimirs Terms descriptions
- CVE-2025-6726Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Updatekrasenslavov Block Editor Gallery Slider for WordPress – Im…
- CVE-2025-5754Useful Tab Block – Responsive & AMP-Compatible <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameterbbc000tommy Useful Tab Block – Responsive & AMP-Compatible
- CVE-2025-6781Copymatic – AI Content Writer & Generator <= 2.1 - Cross-Site Request Forgery to Settings Updateryanfaber Copymatic – AI Content Writer & Generator
- CVE-2025-6053Zuppler Online Ordering <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scriptingbogdansilivestru Zuppler Online Ordering
- CVE-2025-7660Map My Locations <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinglewisking0072 Map My Locations
- CVE-2025-7638Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.45.0 - Authenticated (Administrator+) SQL Injection via `order_by` Parameterwpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2025-5816Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking DetailsPlugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo…
- CVE-2025-7648Ruven Themes: Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingruven-themes Ruven Themes: Shortcodes
- CVE-2025-7431Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slugajay Knowledge Base
- CVE-2025-7767PHPGurukul Art Gallery Management System edit-art-medium-detail.php cross site scriptingPHPGurukul Art Gallery Management System
- CVE-2025-45156Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users.
- CVE-2025-45157Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users.
- CVE-2025-46000An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attacker
- CVE-2025-46002An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemansimogeo/filemanager
- CVE-2025-50581MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do.
- CVE-2025-50582StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module.
- CVE-2025-50583StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module.
- CVE-2025-50584StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module.
- CVE-2025-50586StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).
- CVE-2025-52162agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint.
- CVE-2025-52163A Server-Side Request Forgery (SSRF) in the component TunnelServlet of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 allows attac
- CVE-2025-52166Incorrect access control in Software GmbH Agorum core open v11.9.2 & v11.10.1 allows authenticated attackers to escalate privileges to Admin
- CVE-2025-52168Incorrect access control in the dynawebservice component of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 allows unauthenticated
- CVE-2025-54310qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL.qBittorrent