# CVEs published 2025-09-26

199 CVEs were published on September 26, 2025: 5 critical, 39 high. Days are UTC.

- [CVE-2025-59934](https://cve.now/CVE-2025-59934.md): Formbricks missing JWT signature verification (CVSS 9.4, formbricks)
- [CVE-2025-59845](https://cve.now/CVE-2025-59845.md): Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass (CVSS 8.2, apollographql embeddable-explorer · @apollo/sandbox +1)
- [CVE-2025-11048](https://cve.now/CVE-2025-11048.md): Portabilis i-Educar consulta-dispensas improper authorization (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-11047](https://cve.now/CVE-2025-11047.md): Portabilis i-Educar aluno improper authorization (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-10657](https://cve.now/CVE-2025-10657.md): Docker Desktop with ECI Fails to Enforce Socket Command Restrictions (CVSS 8.7, Docker Desktop)
- [CVE-2025-11046](https://cve.now/CVE-2025-11046.md): Tencent WeKnora test testEmbeddingModel server-side request forgery (CVSS 6.9, Tencent WeKnora)
- [CVE-2025-11045](https://cve.now/CVE-2025-11045.md): WAYOS LQ\_04/LQ\_05/LQ\_06/LQ\_07/LQ\_09 usb\_paswd.asp command injection (CVSS 6.9, WAYOS LQ\_04 · WAYOS LQ\_05 +3)
- [CVE-2025-11041](https://cve.now/CVE-2025-11041.md): itsourcecode Open Source Job Portal index.php sql injection (CVSS 5.3, itsourcecode Open Source Job Portal)
- [CVE-2025-11040](https://cve.now/CVE-2025-11040.md): code-projects Hostel Management System index.php sql injection (CVSS 6.9, code-projects Hostel Management System)
- [CVE-2025-11039](https://cve.now/CVE-2025-11039.md): Campcodes Computer Sales and Inventory System us\_edit1.php sql injection (CVSS 6.9, Campcodes Computer Sales and Inventory System)
- [CVE-2025-11038](https://cve.now/CVE-2025-11038.md): itsourcecode Online Clinic Management System details.php sql injection (CVSS 5.3, itsourcecode Online Clinic Management System)
- [CVE-2025-11037](https://cve.now/CVE-2025-11037.md): code-projects E-Commerce Website admin\_index\_search.php sql injection (CVSS 6.9, code-projects E-Commerce Website)
- [CVE-2025-11036](https://cve.now/CVE-2025-11036.md): code-projects E-Commerce Website admin\_account\_update.php sql injection (CVSS 6.9, code-projects E-Commerce Website)
- [CVE-2025-11035](https://cve.now/CVE-2025-11035.md): Jinher OA text xml external entity reference (CVSS 5.3, Jinher OA)
- [CVE-2025-11034](https://cve.now/CVE-2025-11034.md): Dibo Data Decision Making System common\_dep.action.jsp downloadImpTemplet path traversal (CVSS 5.3, Dibo Data Decision Making System)
- [CVE-2025-11033](https://cve.now/CVE-2025-11033.md): kidaze CourseSelectionSystem COUNT3s7.php sql injection (CVSS 6.9, kidaze CourseSelectionSystem)
- [CVE-2025-11032](https://cve.now/CVE-2025-11032.md): kidaze CourseSelectionSystem COUNT3s6.php sql injection (CVSS 6.9, kidaze CourseSelectionSystem)
- [CVE-2025-11031](https://cve.now/CVE-2025-11031.md): DataTables examples.php path traversal (CVSS 6.9, DataTables)
- [CVE-2025-11030](https://cve.now/CVE-2025-11030.md): Tutorials-Website Employee Management System HTTP Request all-applied-leave.php improper authorization (CVSS 6.9, Tutorials-Website Employee Management System)
- [CVE-2025-11029](https://cve.now/CVE-2025-11029.md): givanz Vvveb cross-site request forgery (CVSS 5.3, givanz Vvveb)
- [CVE-2025-59844](https://cve.now/CVE-2025-59844.md): Argument injection vulnerability in SonarQube Scan Action (CVSS 7.7, SonarSource sonarqube-scan-action)
- [CVE-2025-59843](https://cve.now/CVE-2025-59843.md): FlagForgeCTF Exposes User Emails via Public /api/user/\[username\] API (CVSS 6.9, FlagForgeCTF flagForge)
- [CVE-2025-11028](https://cve.now/CVE-2025-11028.md): givanz Vvveb Image information disclosure (CVSS 6.9, givanz Vvveb)
- [CVE-2025-11027](https://cve.now/CVE-2025-11027.md): givanz Vvveb SVG File cross site scripting (CVSS 4.8, givanz Vvveb)
- [CVE-2025-59842](https://cve.now/CVE-2025-59842.md): JupyterLab LaTeX typesetter links did not enforce \`noopener\` attribute (CVSS 2.1, jupyterlab)
- [CVE-2025-11026](https://cve.now/CVE-2025-11026.md): givanz Vvveb Configuration File information disclosure (CVSS 5.1, givanz Vvveb)
- [CVE-2025-11019](https://cve.now/CVE-2025-11019.md): Total.js CMS Files Menu cross site scripting (CVSS 4.8, Total.js CMS)
- [CVE-2025-36326](https://cve.now/CVE-2025-36326.md): IBM Controller information disclosure (CVSS 3.7, IBM Cognos Controller · IBM Controller)
- [CVE-2025-36274](https://cve.now/CVE-2025-36274.md): IBM Aspera HTTP Gateway information disclosure (CVSS 7.5, IBM Aspera HTTP Gateway)
- [CVE-2025-6396](https://cve.now/CVE-2025-6396.md): XSS in Webbeyaz's web site (CVSS 6.1, Webbeyaz Website Design Website Software)
- [CVE-2025-11018](https://cve.now/CVE-2025-11018.md): Four-Faith Water Conservancy Informatization Platform download.do;usrlogout.do.do path traversal (CVSS 6.9, Four-Faith Water Conservancy Informatization Platform)
- [CVE-2025-11017](https://cve.now/CVE-2025-11017.md): OGRECave Ogre OgreLogManager.cpp stream null pointer dereference (CVSS 4.8, OGRECave Ogre)
- [CVE-2025-11016](https://cve.now/CVE-2025-11016.md): kalcaddle kodbox index.class.php fileOut path traversal (CVSS 5.3, kalcaddle kodbox)
- [CVE-2025-11015](https://cve.now/CVE-2025-11015.md): OGRECave Ogre OgreSTBICodec.cpp encode mismatched memory management routines (CVSS 4.8, OGRECave Ogre)
- [CVE-2025-11025](https://cve.now/CVE-2025-11025.md): Information Disclosure in Vimeosoft Information Technologies' Vimesoft Corporate Messaging Platform (CVSS 5.3, Vimesoft Information Technologies and Software Vimesoft Cor…)
- [CVE-2025-9267](https://cve.now/CVE-2025-9267.md): In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from (CVSS 7.0, Seagate Toolkit)
- [CVE-2025-11014](https://cve.now/CVE-2025-11014.md): OGRECave Ogre Image OgreSTBICodec.cpp encode heap-based overflow (CVSS 4.8, OGRECave Ogre)
- [CVE-2025-11013](https://cve.now/CVE-2025-11013.md): BehaviorTree XML Parser xml\_parsing.cpp loadDocImpl null pointer dereference (CVSS 4.8, BehaviorTree)
- [CVE-2025-11060](https://cve.now/CVE-2025-11060.md): Surrealdb: surrealdb is vulnerable to unauthorized data exposure via live query subscriptions (CVSS 5.7, surrealdb · Red Hat OpenShift Service Mesh)
- [CVE-2025-11012](https://cve.now/CVE-2025-11012.md): BehaviorTree Diagnostic Message script\_parser.cpp ParseScript stack-based overflow (CVSS 4.8, BehaviorTree)
- [CVE-2025-11011](https://cve.now/CVE-2025-11011.md): BehaviorTree json\_export.cpp fromJson null pointer dereference (CVSS 4.8, BehaviorTree)
- [CVE-2025-11010](https://cve.now/CVE-2025-11010.md): vstakhov libucl ucl\_util.c ucl\_include\_common heap-based overflow (CVSS 4.8, vstakhov libucl)
- [CVE-2025-10544](https://cve.now/CVE-2025-10544.md): Unrestricted uploading of dangerous file types to AvePoint products (CVSS 8.6, AvePoint DocAve · AvePoint Perimeter +1)
- [CVE-2025-11042](https://cve.now/CVE-2025-11042.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 4.3, GitLab)
- [CVE-2025-5069](https://cve.now/CVE-2025-5069.md): Incorrect Ownership Assignment in GitLab (CVSS 3.5, GitLab)
- [CVE-2025-10868](https://cve.now/CVE-2025-10868.md): Business Logic Errors in GitLab (CVSS 3.5, GitLab)
- [CVE-2025-7691](https://cve.now/CVE-2025-7691.md): Privilege Defined With Unsafe Actions in GitLab (CVSS 6.5, GitLab)
- [CVE-2025-9642](https://cve.now/CVE-2025-9642.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7, GitLab)
- [CVE-2025-9958](https://cve.now/CVE-2025-9958.md): Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 7.7, GitLab)
- [CVE-2025-10858](https://cve.now/CVE-2025-10858.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5, GitLab)
- [CVE-2025-10867](https://cve.now/CVE-2025-10867.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 3.5, GitLab)
- [CVE-2025-10871](https://cve.now/CVE-2025-10871.md): Missing Authorization in GitLab (CVSS 3.8, GitLab)
- [CVE-2025-11021](https://cve.now/CVE-2025-11021.md): Libsoup: out-of-bounds read in cookie date handling of libsoup http library (CVSS 7.5, libsoup · Red Hat Enterprise Linux)
- [CVE-2025-60219](https://cve.now/CVE-2025-60219.md): WordPress WooCommerce Designer Pro Plugin \<= 1.9.24 - Arbitrary File Upload Vulnerability (CVSS 10.0, HaruTheme WooCommerce Designer Pro)
- [CVE-2025-60186](https://cve.now/CVE-2025-60186.md): WordPress Google+ Comments Plugin \<= 1.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, Alex Moss Google+ Comments)
- [CVE-2025-60185](https://cve.now/CVE-2025-60185.md): WordPress kontur Admin Style Plugin \<= 1.0.4 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, kontur.us kontur Admin Style)
- [CVE-2025-60184](https://cve.now/CVE-2025-60184.md): WordPress SEO Search Permalink Plugin \<= 1.0.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, Terry L. SEO Search Permalink)
- [CVE-2025-60181](https://cve.now/CVE-2025-60181.md): WordPress Silencesoft RSS Reader Plugin \<= 0.6 - Server Side Request Forgery (SSRF) Vulnerability (CVSS 5.4, Silencesoft RSS Reader)
- [CVE-2025-60179](https://cve.now/CVE-2025-60179.md): WordPress Click & Tweet Plugin \<= 0.8.9 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, Space Studio Click & Tweet)
- [CVE-2025-60177](https://cve.now/CVE-2025-60177.md): WordPress Recaptcha – wp Plugin \<= 0.2.6 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, rozx Recaptcha – wp)
- [CVE-2025-60173](https://cve.now/CVE-2025-60173.md): WordPress GST for WooCommerce Plugin \<= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 7.1, Ashwani kumar GST for WooCommerce)
- [CVE-2025-60172](https://cve.now/CVE-2025-60172.md): WordPress Flytedesk Digital Plugin \<= 20181101 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 7.1, Flytedesk Digital)
- [CVE-2025-60171](https://cve.now/CVE-2025-60171.md): WordPress Conditional Cart Messages for WooCommerce – YourPlugins.com Plugin \<= 1.2.10 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 7.1, Conditional Cart Messages for WooCommerce – YourPlugins.com)
- [CVE-2025-60170](https://cve.now/CVE-2025-60170.md): WordPress HTACCESS IP Blocker Plugin \<= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 7.1, Taraprasad Swain HTACCESS IP Blocker)
- [CVE-2025-60169](https://cve.now/CVE-2025-60169.md): WordPress W3SCloud Contact Form 7 to Zoho CRM plugin \<= 3.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, W3S Cloud Technology W3SCloud Contact Form 7 to Zoho CRM)
- [CVE-2025-60167](https://cve.now/CVE-2025-60167.md): WordPress Page Manager for Elementor Plugin \<= 2.0.5 - Sensitive Data Exposure Vulnerability (CVSS 4.3, honzat Page Manager for Elementor)
- [CVE-2025-60166](https://cve.now/CVE-2025-60166.md): WordPress WP Subscription Forms PRO Plugin \<= 2.0.5 - Arbitrary Content Deletion Vulnerability (CVSS 4.3, wpshuffle WP Subscription Forms PRO)
- [CVE-2025-60165](https://cve.now/CVE-2025-60165.md): WordPress Frames Theme \<= 1.5.7 - Broken Access Control Vulnerability (CVSS 4.3, HaruTheme Frames)
- [CVE-2025-60164](https://cve.now/CVE-2025-60164.md): WordPress NewsmanApp plugin \<= 2.7.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, NewsmanApp)
- [CVE-2025-60163](https://cve.now/CVE-2025-60163.md): WordPress bbp topic count plugin \<= 3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Robin W bbp topic count)
- [CVE-2025-60162](https://cve.now/CVE-2025-60162.md): WordPress Job Board Manager Plugin \<= 2.1.61 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, PickPlugins Job Board Manager)
- [CVE-2025-60161](https://cve.now/CVE-2025-60161.md): WordPress ZoloBlocks Plugin \<= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerability (CVSS 5.4, bdthemes ZoloBlocks)
- [CVE-2025-60160](https://cve.now/CVE-2025-60160.md): WordPress Smart Related Products plugin \<= 2.0.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, sharkthemes Smart Related Products)
- [CVE-2025-60159](https://cve.now/CVE-2025-60159.md): WordPress Nota Fiscal Eletrônica WooCommerce plugin \<= 3.4.0.9 - Broken Access Control vulnerability (CVSS 4.3, webmaniabr Nota Fiscal Eletrônica WooCommerce)
- [CVE-2025-60158](https://cve.now/CVE-2025-60158.md): WordPress Nota Fiscal Eletrônica WooCommerce plugin \<= 3.4.0.9 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, webmaniabr Nota Fiscal Eletrônica WooCommerce)
- [CVE-2025-60157](https://cve.now/CVE-2025-60157.md): WordPress WP Ticket Customer Service Software & Support Ticket System Plugin \<= 6.0.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, emarket-design WP Ticket Customer Service Software & Suppor…)
- [CVE-2025-60156](https://cve.now/CVE-2025-60156.md): WordPress AR For WordPress plugin \<= 8.34 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 9.6, webandprint AR For WordPress)
- [CVE-2025-60155](https://cve.now/CVE-2025-60155.md): WordPress WP Virtual Assistant Plugin \<= 3.0 - Broken Access Control Vulnerability (CVSS 5.3, loopus WP Virtual Assistant)
- [CVE-2025-60154](https://cve.now/CVE-2025-60154.md): WordPress MWW Disclaimer Buttons plugin \<= 3.41 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Jennifer Moss MWW Disclaimer Buttons)
- [CVE-2025-60153](https://cve.now/CVE-2025-60153.md): WordPress Subscribe To Unlock Plugin \<= 1.1.5 - Local File Inclusion Vulnerability (CVSS 7.5, wpshuffle Subscribe To Unlock)
- [CVE-2025-60152](https://cve.now/CVE-2025-60152.md): WordPress Subscribe To Unlock Plugin \<= 1.1.5 - Broken Access Control Vulnerability (CVSS 4.3, wpshuffle Subscribe To Unlock)
- [CVE-2025-60150](https://cve.now/CVE-2025-60150.md): WordPress Subscribe to Download plugin \<= 2.0.9 - Local File Inclusion vulnerability (CVSS 7.5, wpshuffle Subscribe to Download)
- [CVE-2025-60149](https://cve.now/CVE-2025-60149.md): WordPress Notely plugin \<= 1.8.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Rocket Apps Notely)
- [CVE-2025-60148](https://cve.now/CVE-2025-60148.md): WordPress Subscribe to Download plugin \<= 2.0.9 - Broken Access Control vulnerability (CVSS 4.3, wpshuffle Subscribe to Download)
- [CVE-2025-60147](https://cve.now/CVE-2025-60147.md): WordPress HT Feed Plugin \<= 1.3.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, HT Plugins HT Feed)
- [CVE-2025-60146](https://cve.now/CVE-2025-60146.md): WordPress Map Categories to Pages Plugin \<= 1.3.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, Amit Verma Map Categories to Pages)
- [CVE-2025-60145](https://cve.now/CVE-2025-60145.md): WordPress Lenix scss compiler Plugin \<= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, yonifre Lenix scss compiler)
- [CVE-2025-60144](https://cve.now/CVE-2025-60144.md): WordPress Lenix scss compiler Plugin \<= 1.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, yonifre Lenix scss compiler)
- [CVE-2025-60143](https://cve.now/CVE-2025-60143.md): WordPress Netgsm plugin \<= 2.9.69 - Broken Access Control vulnerability (CVSS 4.3, Netgsm)
- [CVE-2025-60142](https://cve.now/CVE-2025-60142.md): WordPress Simple Meta Tags Plugin \<= 1.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, DaganLev Simple Meta Tags)
- [CVE-2025-60141](https://cve.now/CVE-2025-60141.md): WordPress The Tribal Plugin \<= 1.3.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, thetechtribe The Tribal)
- [CVE-2025-60140](https://cve.now/CVE-2025-60140.md): WordPress The Tribal Plugin \<= 1.3.3 - Sensitive Data Exposure Vulnerability (CVSS 5.3, thetechtribe The Tribal)
- [CVE-2025-60139](https://cve.now/CVE-2025-60139.md): WordPress Sendle Shipping plugin \<= 6.02 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Joovii Sendle Shipping)
- [CVE-2025-60138](https://cve.now/CVE-2025-60138.md): WordPress SKT Blocks plugin \<= 2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, sonalsinha21 SKT Blocks)
- [CVE-2025-60137](https://cve.now/CVE-2025-60137.md): WordPress Post Featured Video Plugin \<= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, Galaxy Weblinks Post Featured Video)
- [CVE-2025-60136](https://cve.now/CVE-2025-60136.md): WordPress User Notes plugin \<= 1.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, cartpauj User Notes)
- [CVE-2025-60133](https://cve.now/CVE-2025-60133.md): WordPress PE Easy Slider Plugin \<= 1.1.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, DJ-Extensions.com PE Easy Slider)
- [CVE-2025-60130](https://cve.now/CVE-2025-60130.md): WordPress WEDOS Global Plugin \<= 1.2.2 - Broken Access Control Vulnerability (CVSS 5.3, wedos.com WEDOS Global)
- [CVE-2025-60129](https://cve.now/CVE-2025-60129.md): WordPress Yext Plugin \<= 1.1.3 - Broken Access Control Vulnerability (CVSS 5.3, Yext)
- [CVE-2025-60128](https://cve.now/CVE-2025-60128.md): WordPress Delisho Plugin \<= 1.1.3 - Broken Access Control Vulnerability (CVSS 4.3, WP Delicious Delisho)
- [CVE-2025-60127](https://cve.now/CVE-2025-60127.md): WordPress CopySafe Web Protection plugin \<= 5.1 - Broken Access Control vulnerability (CVSS 5.4, ArtistScope CopySafe Web Protection)
- [CVE-2025-60126](https://cve.now/CVE-2025-60126.md): WordPress Testimonial Slider Plugin \<= 3.5.8.6 - Local File Inclusion Vulnerability (CVSS 8.8, PluginOps Testimonial Slider)
- [CVE-2025-60125](https://cve.now/CVE-2025-60125.md): WordPress FoodBook Plugin \<= 4.7.6 - Sensitive Data Exposure Vulnerability (CVSS 5.3, themelooks FoodBook)
- [CVE-2025-60124](https://cve.now/CVE-2025-60124.md): WordPress Simple Colorbox Plugin \<= 1.6.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Ryan Hellyer Simple Colorbox)
- [CVE-2025-60123](https://cve.now/CVE-2025-60123.md): WordPress HivePress Claim Listings plugin \<= 1.1.3 - Broken Access Control vulnerability (CVSS 4.3, HivePress Claim Listings)
- [CVE-2025-60122](https://cve.now/CVE-2025-60122.md): WordPress HivePress Claim Listings plugin \<= 1.1.4 - Broken Access Control vulnerability (CVSS 4.3, HivePress Claim Listings)
- [CVE-2025-60121](https://cve.now/CVE-2025-60121.md): WordPress WooEvents plugin \<= 4.1.7 - Broken Access Control vulnerability (CVSS 5.3, Ex-Themes WooEvents)
- [CVE-2025-60119](https://cve.now/CVE-2025-60119.md): WordPress CoSchedule Plugin \<= 3.3.11 - Sensitive Data Exposure Vulnerability (CVSS 5.3, CoSchedule)
- [CVE-2025-60120](https://cve.now/CVE-2025-60120.md): WordPress WP Directory Kit plugin \<= 1.4.0 - Broken Access Control vulnerability (CVSS 5.3, WPDirectoryKit WP Directory Kit)
- [CVE-2025-60118](https://cve.now/CVE-2025-60118.md): WordPress PGS Core Plugin \<= 5.9.0 - SQL Injection Vulnerability (CVSS 8.5, Potenzaglobalsolutions PGS Core)
- [CVE-2025-60117](https://cve.now/CVE-2025-60117.md): WordPress Vehica Core Plugin \<= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, TangibleWP Vehica Core)
- [CVE-2025-60116](https://cve.now/CVE-2025-60116.md): WordPress Grand Conference Theme Custom Post Type plugin \< 2.6.4 - Broken Access Control vulnerability (CVSS 5.4, ThemeGoods Grand Conference Theme Custom Post Type)
- [CVE-2025-60115](https://cve.now/CVE-2025-60115.md): WordPress Instapage plugin plugin \<= 3.7.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, instapagedev Instapage Plugin)
- [CVE-2025-60114](https://cve.now/CVE-2025-60114.md): WordPress YayCurrency plugin \<= 3.3.1 - Remote Code Execution (RCE) vulnerability (CVSS 6.6, YayCommerce YayCurrency)
- [CVE-2025-60113](https://cve.now/CVE-2025-60113.md): WordPress Groovy Menu Plugin \<= 1.4.3 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, grooni Groovy Menu)
- [CVE-2025-60112](https://cve.now/CVE-2025-60112.md): WordPress aThemes Addons for Elementor Plugin \<= 1.1.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Syed Balkhi aThemes Addons for Elementor)
- [CVE-2025-60111](https://cve.now/CVE-2025-60111.md): WordPress Javo Core Plugin \<= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 8.8, javothemes Javo Core)
- [CVE-2025-60110](https://cve.now/CVE-2025-60110.md): WordPress AllInOne - Banner Rotator Plugin \<= 3.8 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup AllInOne - Banner Rotator)
- [CVE-2025-60109](https://cve.now/CVE-2025-60109.md): WordPress LambertGroup - AllInOne - Content Slider Plugin \<= 3.8 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup - AllInOne - Content Slider)
- [CVE-2025-60108](https://cve.now/CVE-2025-60108.md): WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin \<= 3.8 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup - AllInOne - Banner with Thumbnails)
- [CVE-2025-60107](https://cve.now/CVE-2025-60107.md): WordPress LambertGroup - AllInOne - Banner with Playlist Plugin \<= 3.8 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup - AllInOne - Banner with Playlist)
- [CVE-2025-60106](https://cve.now/CVE-2025-60106.md): WordPress EmailKit Plugin \<= 1.6.0 - Arbitrary Content Deletion Vulnerability (CVSS 4.9, Roxnor EmailKit)
- [CVE-2025-60105](https://cve.now/CVE-2025-60105.md): WordPress Ditty Plugin \<= 3.1.58 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, metaphorcreations Ditty)
- [CVE-2025-60104](https://cve.now/CVE-2025-60104.md): WordPress Gallery Custom Links Plugin \<= 2.2.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, Jordy Meow Gallery Custom Links)
- [CVE-2025-60103](https://cve.now/CVE-2025-60103.md): WordPress ListingPro plugin \<= 2.9.8 - Broken Access Control vulnerability (CVSS 5.4, CridioStudio ListingPro)
- [CVE-2025-60102](https://cve.now/CVE-2025-60102.md): WordPress WPFront User Role Editor Plugin \<= 4.2.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Syam Mohan WPFront User Role Editor)
- [CVE-2025-60099](https://cve.now/CVE-2025-60099.md): WordPress Embed Any Document Plugin \<= 2.7.7 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, awsm.in Embed Any Document)
- [CVE-2025-60100](https://cve.now/CVE-2025-60100.md): WordPress XStore theme \< 9.6 - Content Injection vulnerability (CVSS 5.3, 8theme XStore)
- [CVE-2025-60101](https://cve.now/CVE-2025-60101.md): WordPress Woostify Theme \<= 2.4.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, duongancol Woostify)
- [CVE-2025-60098](https://cve.now/CVE-2025-60098.md): WordPress Theme My Login Plugin \<= 7.1.12 - Broken Access Control Vulnerability (CVSS 6.5, Jeff Farthing Theme My Login)
- [CVE-2025-60097](https://cve.now/CVE-2025-60097.md): WordPress TheGem Theme \<= 5.10.5 - Broken Access Control Vulnerability (CVSS 5.4, CodexThemes TheGem)
- [CVE-2025-60096](https://cve.now/CVE-2025-60096.md): WordPress TheGem (Elementor) Theme \<= 5.10.5 - Broken Access Control Vulnerability (CVSS 5.4, CodexThemes TheGem)
- [CVE-2025-60095](https://cve.now/CVE-2025-60095.md): WordPress Stackable Plugin \<= 3.18.1 - Sensitive Data Exposure Vulnerability (CVSS 4.3, Benjamin Intal Stackable)
- [CVE-2025-60094](https://cve.now/CVE-2025-60094.md): WordPress Stackable Plugin \<= 3.18.1 - Broken Access Control Vulnerability (CVSS 4.3, Benjamin Intal Stackable)
- [CVE-2025-60093](https://cve.now/CVE-2025-60093.md): WordPress Download Manager Plugin \<= 3.3.24 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, Shahjada Download Manager)
- [CVE-2025-60092](https://cve.now/CVE-2025-60092.md): WordPress Download Manager Plugin \<= 3.3.25 - Sensitive Data Exposure Vulnerability (CVSS 5.3, Shahjada Download Manager)
- [CVE-2025-60040](https://cve.now/CVE-2025-60040.md): WordPress wp-mpdf Plugin \<= 3.9.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, fkrauthan wp-mpdf)
- [CVE-2025-4957](https://cve.now/CVE-2025-4957.md): WordPress ProfileGrid plugin \<= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Metagauss ProfileGrid)
- [CVE-2025-27006](https://cve.now/CVE-2025-27006.md): WordPress Authorsy Plugin \<= 1.0.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, themeplugs Authorsy)
- [CVE-2025-48107](https://cve.now/CVE-2025-48107.md): WordPress Uncode theme \< 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, undsgn Uncode)
- [CVE-2025-48326](https://cve.now/CVE-2025-48326.md): WordPress Acclectic Media Organizer Plugin \<= 1.4 - Broken Access Control Vulnerability (CVSS 6.5, Acclectic Media Organizer)
- [CVE-2025-58914](https://cve.now/CVE-2025-58914.md): WordPress Di Themes Demo Site Importer plugin \<= 1.2 - Cross Site Request Forgery (CSRF) to Plugin Activation vulnerability (CVSS 4.3, Di Themes Demo Site Importer)
- [CVE-2025-58917](https://cve.now/CVE-2025-58917.md): WordPress Quantities and Units for WooCommerce plugin \<= 1.0.13 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Nick Verwymeren Quantities and Units for WooCommerce)
- [CVE-2025-58919](https://cve.now/CVE-2025-58919.md): WordPress Wide Banner plugin \<= 1.0.4 - Broken Access Control vulnerability (CVSS 5.3, guihom Wide Banner)
- [CVE-2025-59012](https://cve.now/CVE-2025-59012.md): WordPress Traveler theme \< 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, shinetheme Traveler)
- [CVE-2025-59002](https://cve.now/CVE-2025-59002.md): WordPress BM Content Builder Plugin \< 3.16.3.3 - Arbitrary File Deletion Vulnerability (CVSS 7.7, SeaTheme BM Content Builder)
- [CVE-2025-59010](https://cve.now/CVE-2025-59010.md): WordPress Permalink Manager Lite Plugin \<= 2.5.1.3 - Sensitive Data Exposure Vulnerability (CVSS 7.5, Maciej Bis Permalink Manager Lite)
- [CVE-2025-59011](https://cve.now/CVE-2025-59011.md): WordPress Traveler Theme \< 3.2.3 - Arbitrary Content Deletion Vulnerability (CVSS 7.5, shinetheme Traveler)
- [CVE-2025-1862](https://cve.now/CVE-2025-1862.md): Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution (CVSS 6.7, WSO2 Enterprise Integrator · WSO2 Identity Server +1)
- [CVE-2025-1396](https://cve.now/CVE-2025-1396.md): Username Enumeration in Multiple WSO2 Products with Multi-Attribute Login Enabled (CVSS 3.7, WSO2 Identity Server · WSO2 Open Banking IAM +1)
- [CVE-2025-54831](https://cve.now/CVE-2025-54831.md): Apache Airflow: Connection sensitive details exposed to users with READ permissions (CVSS 6.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2025-35027](https://cve.now/CVE-2025-35027.md): Unitree Multiple Robotic Products Command Injection (CVSS 7.3, Unitree Go2 · Unitree G1)
- [CVE-2025-10490](https://cve.now/CVE-2025-10490.md): Zephyr Project Manager \<= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, dylanjkotze Zephyr Project Manager)
- [CVE-2025-10136](https://cve.now/CVE-2025-10136.md): TweetThis Shortcode \<= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, douglaskarr TweetThis Shortcode)
- [CVE-2025-10180](https://cve.now/CVE-2025-10180.md): Markdown Shortcode \<= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, jhoppe Markdown Shortcode)
- [CVE-2025-10137](https://cve.now/CVE-2025-10137.md): Snow Monkey \<= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery (CVSS 5.4, inc2734 Snow Monkey)
- [CVE-2025-10307](https://cve.now/CVE-2025-10307.md): Backuply – Backup, Restore, Migrate and Clone \<= 1.4.8 - Authenticated (Admin+) Arbitrary File Deletion (CVSS 6.5, softaculous Backuply – Backup, Restore, Migrate and Clone)
- [CVE-2025-9490](https://cve.now/CVE-2025-9490.md): Popup Maker \<= 1.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter (CVSS 6.4, danieliser Popup Maker – Boost Sales, Conversions, Optins,…)
- [CVE-2025-10747](https://cve.now/CVE-2025-10747.md): WP-DownloadManager \<= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2, gamerz WP-DownloadManager)
- [CVE-2025-10036](https://cve.now/CVE-2025-10036.md): Featured Image from URL (FIFU) \<= 5.2.7 - Authenticated (Admin+) SQL Injection (CVSS 4.9, marceljm Featured Image from URL)
- [CVE-2025-9985](https://cve.now/CVE-2025-9985.md): Featured Image from URL (FIFU) \<= 5.2.7 - Unauthenticated Information Exposure via Log File (CVSS 5.3, marceljm Featured Image from URL)
- [CVE-2025-9984](https://cve.now/CVE-2025-9984.md): Featured Image from URL (FIFU) \<= 5.2.7 - Missing Authorization to Password Protected Post Disclosure (CVSS 5.3, marceljm Featured Image from URL)
- [CVE-2025-10037](https://cve.now/CVE-2025-10037.md): Featured Image from URL (FIFU) \<= 5.2.7 - Authenticated (Admin+) SQL Injection (CVSS 4.9, marceljm Featured Image from URL)
- [CVE-2025-11000](https://cve.now/CVE-2025-11000.md): Open Babel PQSformat.cpp ReadMolecule null pointer dereference (CVSS 4.8, Open Babel · openbabel)
- [CVE-2025-10377](https://cve.now/CVE-2025-10377.md): System Dashboard \<= 2.8.20 - Cross-Site Request Forgery (CVSS 4.3, qriouslad System Dashboard)
- [CVE-2025-9044](https://cve.now/CVE-2025-9044.md): Mapster WP Maps \<= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Mapster WP Maps)
- [CVE-2025-10745](https://cve.now/CVE-2025-10745.md): Banhammer – Monitor Site Traffic, Block Bad Users and Bots \<= 3.4.8 - Unauthenticated Protection Mechanism Bypass (CVSS 5.3, specialk Banhammer – Monitor Site Traffic, Block Bad Users…)
- [CVE-2025-10173](https://cve.now/CVE-2025-10173.md): ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution \<= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings Update (CVSS 2.7, roxnor ShopEngine Elementor WooCommerce Builder Addon – All…)
- [CVE-2025-10999](https://cve.now/CVE-2025-10999.md): Open Babel cacaoformat.cpp SetHilderbrandt null pointer dereference (CVSS 4.8, Open Babel · openbabel)
- [CVE-2025-10998](https://cve.now/CVE-2025-10998.md): Open Babel chemkinformat.cpp ReadReactionQualifierLines null pointer dereference (CVSS 4.8, Open Babel · openbabel)
- [CVE-2025-10997](https://cve.now/CVE-2025-10997.md): Open Babel chemkinformat.cpp CheckSpecies heap-based overflow (CVSS 4.8, Open Babel · openbabel)
- [CVE-2025-10996](https://cve.now/CVE-2025-10996.md): Open Babel smilesformat.cpp ParseSmiles heap-based overflow (CVSS 4.8, Open Babel · openbabel)
- [CVE-2025-10995](https://cve.now/CVE-2025-10995.md): Open Babel zipstreamimpl.h underflow memory corruption (CVSS 4.8, Open Babel · openbabel)
- [CVE-2025-10994](https://cve.now/CVE-2025-10994.md): Open Babel gamessformat.cpp ReadMolecule use after free (CVSS 4.8, Open Babel · openbabel)
- [CVE-2025-10752](https://cve.now/CVE-2025-10752.md): OAuth Single Sign On – SSO (OAuth Client) \<= 6.26.12 - Cross-Site Request Forgery (CVSS 4.3, cyberlord92 OAuth Single Sign On – SSO)
- [CVE-2025-8200](https://cve.now/CVE-2025-8200.md): Mega Elements – Addons for Elementor \<= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget (CVSS 6.4, kraftplugins Mega Elements – Addons for Elementor)
- [CVE-2025-10178](https://cve.now/CVE-2025-10178.md): CM Business Directory \<= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, creativemindssolutions CM Business Directory – Optimise and…)
- [CVE-2025-8906](https://cve.now/CVE-2025-8906.md): Widgets for Tiktok Feed \<= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, trustindex Widgets for Tiktok Feed)
- [CVE-2025-10993](https://cve.now/CVE-2025-10993.md): MuYuCMS Template Management admin.php code injection (CVSS 5.1, MuYuCMS)
- [CVE-2025-10992](https://cve.now/CVE-2025-10992.md): roncoo roncoo-pay lookupList improper authorization (CVSS 6.9, roncoo-pay)
- [CVE-2025-10989](https://cve.now/CVE-2025-10989.md): yangzongzhuan RuoYi selectAll improper authorization (CVSS 5.3, yangzongzhuan RuoYi)
- [CVE-2025-10988](https://cve.now/CVE-2025-10988.md): YunaiV ruoyi-vue-pro transfer improper authorization (CVSS 5.3, YunaiV ruoyi-vue-pro)
- [CVE-2025-10987](https://cve.now/CVE-2025-10987.md): YunaiV yudao-cloud HTTP Request transfer improper authorization (CVSS 5.3, YunaiV yudao-cloud)
- [CVE-2025-10981](https://cve.now/CVE-2025-10981.md): JeecgBoot exportXls improper authorization (CVSS 5.3, JeecgBoot)
- [CVE-2025-26258](https://cve.now/CVE-2025-26258.md): Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.' (CVSS 6.1)
- [CVE-2025-45994](https://cve.now/CVE-2025-45994.md): An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted POST reques (CVSS 7.5)
- [CVE-2025-55187](https://cve.now/CVE-2025-55187.md): In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges. (CVSS 9.9)
- [CVE-2025-55847](https://cve.now/CVE-2025-55847.md): Wavlink M86X3A\_V240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file. (CVSS 8.8)
- [CVE-2025-55848](https://cve.now/CVE-2025-55848.md): An issue was discovered in DIR-823 firmware 20250416. (CVSS 8.8)
- [CVE-2025-56383](https://cve.now/CVE-2025-56383.md): Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. (CVSS 8.4)
- [CVE-2025-56463](https://cve.now/CVE-2025-56463.md): Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key disclosure. (CVSS 6.8)
- [CVE-2025-57292](https://cve.now/CVE-2025-57292.md): Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload functionality. (CVSS 6.1)
- [CVE-2025-57692](https://cve.now/CVE-2025-57692.md): PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of (CVSS 6.8, Piranha)
- [CVE-2025-58384](https://cve.now/CVE-2025-58384.md): In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code execution through the .NET Remoting library (CVSS 10.0)
- [CVE-2025-58385](https://cve.now/CVE-2025-58385.md): In DOXENSE WATCHDOC before 6.1.0.5094, private user puk codes can be disclosed for Active Directory registered users (there is hard-coded an (CVSS 7.1)
- [CVE-2025-59362](https://cve.now/CVE-2025-59362.md): Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. (CVSS 4.0)
- [CVE-2025-60017](https://cve.now/CVE-2025-60017.md): Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd\_restart.sh wifi\_ssid or wifi\_pass par (CVSS 8.2, Unitree Go2 · Unitree G1 +2)
- [CVE-2025-60250](https://cve.now/CVE-2025-60250.md): Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 284 (CVSS 4.7, Unitree Go2 · Unitree G1 +2)
- [CVE-2025-60251](https://cve.now/CVE-2025-60251.md): Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring. (CVSS 5.0, Unitree Go2 · Unitree G1 +2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.