# CVEs published 2025-10-29

158 CVEs were published on October 29, 2025: 8 critical, 50 high. Days are UTC.

- [CVE-2025-62257](https://cve.now/CVE-2025-62257.md): Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 thro (CVSS 6.3, Liferay Portal · Liferay DXP +1)
- [CVE-2025-12466](https://cve.now/CVE-2025-12466.md): Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114 (CVSS 7.5, Drupal Simple OAuth (OAuth2) & OpenID Connect · drupal/simp…)
- [CVE-2025-12083](https://cve.now/CVE-2025-12083.md): CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113 (CVSS 6.1, Drupal CivicTheme Design System · drupal/civictheme)
- [CVE-2025-12082](https://cve.now/CVE-2025-12082.md): CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112 (CVSS 7.5, Drupal CivicTheme Design System · drupal/civictheme)
- [CVE-2025-10929](https://cve.now/CVE-2025-10929.md): Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111 (CVSS 5.3, Drupal Reverse Proxy Header · drupal/reverse\_proxy\_header)
- [CVE-2025-10930](https://cve.now/CVE-2025-10930.md): Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110 (CVSS 6.5, Drupal Currency · drupal/currency)
- [CVE-2025-10931](https://cve.now/CVE-2025-10931.md): Umami Analytics - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-109 (CVSS 3.8, Drupal Umami Analytics · drupal/umami\_analytics)
- [CVE-2025-10928](https://cve.now/CVE-2025-10928.md): Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-108 (CVSS 6.3, Drupal Access code · drupal/access\_code)
- [CVE-2025-10927](https://cve.now/CVE-2025-10927.md): Plausible tracking - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-107 (CVSS 6.1, Drupal Plausible tracking · drupal/plausible\_tracking)
- [CVE-2025-10926](https://cve.now/CVE-2025-10926.md): JSON Field - Critical - Cross Site Scripting - SA-CONTRIB-2025-106 (CVSS 6.1, Drupal JSON Field · drupal/json\_field)
- [CVE-2025-9954](https://cve.now/CVE-2025-9954.md): Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105 (CVSS 7.5, Drupal Acquia DAM · drupal/acquia\_dam)
- [CVE-2025-54549](https://cve.now/CVE-2025-54549.md): Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO (CVSS 5.9, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-54548](https://cve.now/CVE-2025-54548.md): On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes) (CVSS 4.3, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-54547](https://cve.now/CVE-2025-54547.md): On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired (CVSS 5.3, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-54546](https://cve.now/CVE-2025-54546.md): On affected platforms, restricted users could use SSH port forwarding to access host-internal services (CVSS 7.5, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-54545](https://cve.now/CVE-2025-54545.md): On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges. (CVSS 7.8, Arista Networks DANZ Monitoring Fabric)
- [CVE-2025-61724](https://cve.now/CVE-2025-61724.md): Excessive CPU consumption in Reader.ReadResponse in net/textproto (CVSS 5.3, Go standard library net/textproto · stdlib)
- [CVE-2025-58183](https://cve.now/CVE-2025-58183.md): Unbounded allocation when parsing GNU sparse map in archive/tar (CVSS 4.3, Go standard library archive/tar · stdlib)
- [CVE-2025-58188](https://cve.now/CVE-2025-58188.md): Panic when validating certificates with DSA public keys in crypto/x509 (CVSS 7.5, Go standard library crypto/x509 · stdlib)
- [CVE-2025-58186](https://cve.now/CVE-2025-58186.md): Lack of limit when parsing cookies can cause memory exhaustion in net/http (CVSS 5.3, Go standard library net/http · stdlib)
- [CVE-2025-58185](https://cve.now/CVE-2025-58185.md): Parsing DER payload can cause memory exhaustion in encoding/asn1 (CVSS 5.3, Go standard library encoding/asn1 · stdlib)
- [CVE-2025-47912](https://cve.now/CVE-2025-47912.md): Insufficient validation of bracketed IPv6 hostnames in net/url (CVSS 5.3, Go standard library net/url · stdlib)
- [CVE-2025-61723](https://cve.now/CVE-2025-61723.md): Quadratic complexity when parsing some invalid inputs in encoding/pem (CVSS 7.5, Go standard library encoding/pem · stdlib)
- [CVE-2025-58189](https://cve.now/CVE-2025-58189.md): ALPN negotiation error contains attacker controlled information in crypto/tls (CVSS 5.3, Go standard library crypto/tls · stdlib)
- [CVE-2025-58187](https://cve.now/CVE-2025-58187.md): Quadratic complexity when checking name constraints in crypto/x509 (CVSS 7.5, Go standard library crypto/x509 · stdlib)
- [CVE-2025-61725](https://cve.now/CVE-2025-61725.md): Excessive CPU consumption in ParseAddress in net/mail (CVSS 7.5, Go standard library net/mail · stdlib)
- [CVE-2025-61959](https://cve.now/CVE-2025-61959.md): Vertikal Systems Hospital Manager Backend Services Generation of Error Message Containing Sensitive Information (CVSS 6.9, Vertikal Systems Hospital Manager Backend Services)
- [CVE-2025-54459](https://cve.now/CVE-2025-54459.md): Vertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVSS 8.7, Vertikal Systems Hospital Manager Backend Services)
- [CVE-2025-10934](https://cve.now/CVE-2025-10934.md): GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-11465](https://cve.now/CVE-2025-11465.md): Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Ashlar-Vellum Cobalt)
- [CVE-2025-11464](https://cve.now/CVE-2025-11464.md): Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Ashlar-Vellum Cobalt)
- [CVE-2025-11463](https://cve.now/CVE-2025-11463.md): Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Ashlar-Vellum Cobalt)
- [CVE-2025-11466](https://cve.now/CVE-2025-11466.md): Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability (CVSS 4.9, Allegra)
- [CVE-2025-11200](https://cve.now/CVE-2025-11200.md): MLflow Weak Password Requirements Authentication Bypass Vulnerability (CVSS 8.1, MLflow)
- [CVE-2025-11201](https://cve.now/CVE-2025-11201.md): MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability (CVSS 8.1, MLflow)
- [CVE-2025-11202](https://cve.now/CVE-2025-11202.md): win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability (CVSS 9.8, win-cli-mcp-server)
- [CVE-2025-9870](https://cve.now/CVE-2025-9870.md): Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Razer Synapse)
- [CVE-2025-9871](https://cve.now/CVE-2025-9871.md): Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Razer Synapse)
- [CVE-2025-9869](https://cve.now/CVE-2025-9869.md): Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Razer Synapse)
- [CVE-2025-11203](https://cve.now/CVE-2025-11203.md): LiteLLM Information health API\_KEY Information Disclosure Vulnerability (CVSS 3.5, LiteLLM)
- [CVE-2025-10925](https://cve.now/CVE-2025-10925.md): GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10924](https://cve.now/CVE-2025-10924.md): GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10923](https://cve.now/CVE-2025-10923.md): GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10922](https://cve.now/CVE-2025-10922.md): GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10921](https://cve.now/CVE-2025-10921.md): GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-10920](https://cve.now/CVE-2025-10920.md): GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-64104](https://cve.now/CVE-2025-64104.md): LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore (CVSS 7.3, langchain-ai langgraph · langgraph-checkpoint-sqlite)
- [CVE-2025-64103](https://cve.now/CVE-2025-64103.md): Zitadel Bypass Second Authentication Factor (CVSS 8.7, zitadel · github.com/zitadel/zitadel +1)
- [CVE-2018-25120](https://cve.now/CVE-2018-25120.md): D-Link DNS-343 ShareCenter \<= 1.05 Command Injection via /goform/Mail\_Test (CVSS 9.3, D-Link DNS-343 ShareCenter)
- [CVE-2025-64102](https://cve.now/CVE-2025-64102.md): Zitadel allows brute-forcing authentication factors (CVSS 7.7, zitadel · github.com/zitadel/zitadel/v2 +1)
- [CVE-2025-64101](https://cve.now/CVE-2025-64101.md): ZITADEL Vulnerable to Account Takeover via Malicious Forwarded Header Injection (CVSS 8.1, zitadel · github.com/zitadel/zitadel/v2 +1)
- [CVE-2025-11232](https://cve.now/CVE-2025-11232.md): Invalid characters cause assert (CVSS 7.5, ISC Kea)
- [CVE-2025-64100](https://cve.now/CVE-2025-64100.md): CKAN Vulnerable to Session Cookie Fixation (CVSS 6.1, ckan)
- [CVE-2025-62797](https://cve.now/CVE-2025-62797.md): CSRF in FluxCP account endpoints allows account takeover / state-changing actions (CVSS 8.6, rathena FluxCP)
- [CVE-2025-1549](https://cve.now/CVE-2025-1549.md): WatchGuard Mobile VPN with SSL Local Privilege Escallation (CVSS 6.3, WatchGuard Mobile VPN with SSL Client)
- [CVE-2025-12479](https://cve.now/CVE-2025-12479.md): Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-62792](https://cve.now/CVE-2025-62792.md): Wazuh vulnerable to Heap-based Buffer Over-read in w\_expression\_match (CVSS 6.9, wazuh)
- [CVE-2025-62791](https://cve.now/CVE-2025-62791.md): Wazuh vulnerable to NULL pointer dereference in DecodeCiscat (CVSS 6.9, wazuh)
- [CVE-2025-62790](https://cve.now/CVE-2025-62790.md): Wazuh vulnerable to NULL pointer dereference in fim\_fetch\_attributes\_state (CVSS 6.9, wazuh)
- [CVE-2025-62789](https://cve.now/CVE-2025-62789.md): Wazuh vulnerable to NULL pointer dereference in fim\_alert line 712 (CVSS 6.9, wazuh)
- [CVE-2025-62788](https://cve.now/CVE-2025-62788.md): Wazuh Vulnerable to Heap Use After Free in w\_copy\_event\_for\_log (CVSS 6.3, wazuh)
- [CVE-2025-12478](https://cve.now/CVE-2025-12478.md): Non-Compliant TLS Configuration (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-12477](https://cve.now/CVE-2025-12477.md): Server Version Disclosure (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-12476](https://cve.now/CVE-2025-12476.md): Resource Lacking AuthN (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-62787](https://cve.now/CVE-2025-62787.md): Wazuh Vulnerable to Heap-based Buffer Over-read in DecodeWinevt (CVSS 2.1, wazuh)
- [CVE-2025-62786](https://cve.now/CVE-2025-62786.md): Wazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode\_win\_permissions (CVSS 6.3, wazuh)
- [CVE-2025-62785](https://cve.now/CVE-2025-62785.md): Wazuh fillData NULL pointer dereference causes analysisd crash (CVSS 6.9, wazuh)
- [CVE-2025-12148](https://cve.now/CVE-2025-12148.md): Unauthorized access to fields protected by Field Masking (FM) for fields of type IP (CVSS 6.0, floragunn Search Guard FLX)
- [CVE-2024-14012](https://cve.now/CVE-2024-14012.md): Potential Privilege Escalation in Revenera InstallShield 2023 R1 (CVSS 7.3, Revenera InstallShield)
- [CVE-2025-12147](https://cve.now/CVE-2025-12147.md): Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object (CVSS 6.0, floragunn Search Guard FLX)
- [CVE-2025-54384](https://cve.now/CVE-2025-54384.md): CKAN stored XSS vulnerability in Markdown description fields (CVSS 6.3, ckan)
- [CVE-2024-58269](https://cve.now/CVE-2024-58269.md): Rancher exposes sensitive information through audit logs (CVSS 4.3, SUSE rancher · github.com/rancher/rancher)
- [CVE-2023-32199](https://cve.now/CVE-2023-32199.md): Rancher user retains access to clusters despite Global Role removal (CVSS 4.3, SUSE rancher · github.com/rancher/rancher)
- [CVE-2025-10932](https://cve.now/CVE-2025-10932.md): AS2 module allows uncontrolled file uploads (CVSS 8.2, Progress MOVEit Transfer)
- [CVE-2023-7324](https://cve.now/CVE-2023-7324.md): scsi: ses: Fix possible addl\_desc\_ptr out-of-bounds accesses (CVSS 8.1, Linux)
- [CVE-2025-40085](https://cve.now/CVE-2025-40085.md): ALSA: usb-audio: Fix NULL pointer deference in try\_to\_register\_card (no CVSS, Linux)
- [CVE-2025-40084](https://cve.now/CVE-2025-40084.md): ksmbd: transport\_ipc: validate payload size before reading handle (CVSS 7.1, Linux)
- [CVE-2025-40083](https://cve.now/CVE-2025-40083.md): net/sched: sch\_qfq: Fix null-deref in agg\_dequeue (no CVSS, Linux)
- [CVE-2025-64150](https://cve.now/CVE-2025-64150.md): A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect t (CVSS 5.4, Jenkins Project Jenkins Publish to Bitbucket Plugin · org.j…)
- [CVE-2025-64149](https://cve.now/CVE-2025-64149.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an a (CVSS 5.4, Jenkins Project Jenkins Publish to Bitbucket Plugin · org.j…)
- [CVE-2025-64148](https://cve.now/CVE-2025-64148.md): A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate (CVSS 4.3, Jenkins Project Jenkins Publish to Bitbucket Plugin · org.j…)
- [CVE-2025-64147](https://cve.now/CVE-2025-64147.md): Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attacke (CVSS 4.3, Jenkins Project Jenkins Curseforge Publisher Plugin · org.j…)
- [CVE-2025-64146](https://cve.now/CVE-2025-64146.md): Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be view (CVSS 4.3, Jenkins Project Jenkins Curseforge Publisher Plugin · org.j…)
- [CVE-2025-64145](https://cve.now/CVE-2025-64145.md): Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for at (CVSS 4.3, Jenkins Project Jenkins ByteGuard Build Actions Plugin · io…)
- [CVE-2025-64144](https://cve.now/CVE-2025-64144.md): Jenkins ByteGuard Build Actions Plugin 1.0 stores API tokens unencrypted in job config.xml files on the Jenkins controller where they can be (CVSS 4.3, Jenkins Project Jenkins ByteGuard Build Actions Plugin · io…)
- [CVE-2025-64143](https://cve.now/CVE-2025-64143.md): Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controll (CVSS 4.3, Jenkins Project Jenkins OpenShift Pipeline Plugin · com.ope…)
- [CVE-2025-64142](https://cve.now/CVE-2025-64142.md): A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to (CVSS 4.3, Jenkins Project Jenkins Nexus Task Runner Plugin · org.jenk…)
- [CVE-2025-64141](https://cve.now/CVE-2025-64141.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an at (CVSS 4.3, Jenkins Project Jenkins Nexus Task Runner Plugin · org.jenk…)
- [CVE-2025-64140](https://cve.now/CVE-2025-64140.md): Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Ite (CVSS 8.8, Jenkins Project Jenkins Azure CLI Plugin · org.jenkins-ci.p…)
- [CVE-2025-64139](https://cve.now/CVE-2025-64139.md): A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to conn (CVSS 4.3, Jenkins Project Jenkins Start Windocks Containers Plugin ·…)
- [CVE-2025-64138](https://cve.now/CVE-2025-64138.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to (CVSS 4.3, Jenkins Project Jenkins Start Windocks Containers Plugin ·…)
- [CVE-2025-64137](https://cve.now/CVE-2025-64137.md): A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacke (CVSS 4.3, Jenkins Project Jenkins Themis Plugin · org.jenkins-ci.plug…)
- [CVE-2025-64136](https://cve.now/CVE-2025-64136.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-spec (CVSS 4.3, Jenkins Project Jenkins Themis Plugin · org.jenkins-ci.plug…)
- [CVE-2025-64135](https://cve.now/CVE-2025-64135.md): Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb\_8 and earlier sets the Java system property \`jdk.http.auth.tunneling.disabledSchemes\` (CVSS 5.9, Jenkins Project Jenkins Eggplant Runner Plugin · io.jenkins…)
- [CVE-2025-64134](https://cve.now/CVE-2025-64134.md): Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prev (CVSS 7.1, Jenkins Project Jenkins JDepend Plugin · org.jenkins-ci.plu…)
- [CVE-2025-64133](https://cve.now/CVE-2025-64133.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows attacke (CVSS 5.4, Jenkins Project Jenkins Extensible Choice Parameter Plugin…)
- [CVE-2025-64132](https://cve.now/CVE-2025-64132.md): Jenkins MCP Server Plugin 0.84.v50ca\_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to tr (CVSS 5.4, Jenkins Project Jenkins MCP Server Plugin · io.jenkins.plug…)
- [CVE-2025-64131](https://cve.now/CVE-2025-64131.md): Jenkins SAML Plugin 4.583.vc68232f7018a\_ and earlier does not implement a replay cache, allowing attackers able to obtain information about (CVSS 7.5, Jenkins Project Jenkins SAML Plugin · org.jenkins-ci.plugin…)
- [CVE-2025-11587](https://cve.now/CVE-2025-11587.md): Call Now Button \<= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update (CVSS 4.3, jgrietveld Call Now Button – The #1 Click to Call Button fo…)
- [CVE-2025-11632](https://cve.now/CVE-2025-11632.md): Call Now Button \<= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions (CVSS 4.3, jgrietveld Call Now Button – The #1 Click to Call Button fo…)
- [CVE-2025-12142](https://cve.now/CVE-2025-12142.md): BSS(Block Started by Symbol) Memory Corruption Vulnerability (CVSS 6.9, ABB Terra AC wallbox)
- [CVE-2025-12461](https://cve.now/CVE-2025-12461.md): Unprotected access to parts of the application in Epsilon RH by Grupo Castilla (CVSS 6.9, Grupo Castilla Epsilon RH)
- [CVE-2015-10147](https://cve.now/CVE-2015-10147.md): Easy Testimonial Slider and Form \<= 1.0.2 - Authenticated (Admin+) SQL injection (CVSS 4.9, nik00726 Easy Testimonial Slider and Form)
- [CVE-2025-12450](https://cve.now/CVE-2025-12450.md): LiteSpeed Cache \<= 7.5.0.1 - Reflected Cross-Site Scripting (CVSS 6.1, litespeedtech LiteSpeed Cache)
- [CVE-2015-10146](https://cve.now/CVE-2015-10146.md): Thumbnail Slider With Lightbox \<= 1.0.4 - Authenticated (Admin+) SQL Injection (CVSS 4.9, nik00726 Thumbnail Slider With Lightbox)
- [CVE-2025-12058](https://cve.now/CVE-2025-12058.md): Vulnerability in Keras Model.load\_model Leading to Arbitrary Local File Loading and SSRF (CVSS 5.9, Keras)
- [CVE-2025-64291](https://cve.now/CVE-2025-64291.md): WordPress Premmerce User Roles plugin \<= 1.0.13 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Premmerce User Roles)
- [CVE-2025-64290](https://cve.now/CVE-2025-64290.md): WordPress Premmerce Product Search for WooCommerce plugin \<= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Premmerce Product Search for WooCommerce)
- [CVE-2025-64289](https://cve.now/CVE-2025-64289.md): WordPress Premmerce Product Search for WooCommerce plugin \<= 2.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Premmerce Product Search for WooCommerce)
- [CVE-2025-64288](https://cve.now/CVE-2025-64288.md): WordPress Premmerce plugin \<= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Premmerce)
- [CVE-2025-64286](https://cve.now/CVE-2025-64286.md): WordPress WP Rentals theme \<= 3.13.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, WpEstate WP Rentals)
- [CVE-2025-64285](https://cve.now/CVE-2025-64285.md): WordPress Premmerce Wholesale Pricing for WooCommerce plugin \<= 1.1.10 - Broken Access Control vulnerability (CVSS 5.4, Premmerce Wholesale Pricing for WooCommerce)
- [CVE-2025-64284](https://cve.now/CVE-2025-64284.md): WordPress Majestic Support plugin \<= 1.0.7 - Local File Inclusion vulnerability (CVSS 7.5, Majestic Support)
- [CVE-2025-64283](https://cve.now/CVE-2025-64283.md): WordPress RTMKit plugin \<= 1.6.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Rometheme RTMKit)
- [CVE-2025-64234](https://cve.now/CVE-2025-64234.md): WordPress Evergreen Content Poster plugin \<= 1.4.5 - Broken Access Control vulnerability (CVSS 4.3, Evergreen Content Poster)
- [CVE-2025-64229](https://cve.now/CVE-2025-64229.md): WordPress Client Invoicing by Sprout Invoices plugin \<= 20.8.7 - Broken Access Control vulnerability (CVSS 4.3, BoldGrid Client Invoicing by Sprout Invoices)
- [CVE-2025-64228](https://cve.now/CVE-2025-64228.md): WordPress SUMO Affiliates Pro plugin \<= 11.0.0 - Sensitive Data Exposure vulnerability (CVSS 4.3, FantasticPlugins SUMO Affiliates Pro)
- [CVE-2025-64226](https://cve.now/CVE-2025-64226.md): WordPress Stockie Extra plugin \<= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, colabrio Stockie Extra)
- [CVE-2025-64220](https://cve.now/CVE-2025-64220.md): WordPress Rey Core plugin \<= 3.1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ReyCommerce Rey Core)
- [CVE-2025-64219](https://cve.now/CVE-2025-64219.md): WordPress Business Directory plugin \<= 6.4.18 - Broken Access Control vulnerability (CVSS 4.3, Strategy11 Team Business Directory)
- [CVE-2025-64216](https://cve.now/CVE-2025-64216.md): WordPress SmartMag theme \<= 10.3.0 - Local File Inclusion vulnerability (CVSS 7.5, ThemeSphere SmartMag)
- [CVE-2025-64212](https://cve.now/CVE-2025-64212.md): WordPress MasterStudy LMS Pro plugin \< 4.7.16 - Broken Access Control vulnerability (CVSS 5.4, StylemixThemes MasterStudy LMS Pro)
- [CVE-2025-64211](https://cve.now/CVE-2025-64211.md): WordPress Masterstudy Elementor Widgets plugin \<= 1.2.4 - Broken Access Control vulnerability (CVSS 5.3, StylemixThemes Masterstudy Elementor Widgets)
- [CVE-2025-64210](https://cve.now/CVE-2025-64210.md): WordPress Masterstudy Elementor Widgets plugin \<= 1.2.4 - Broken Access Control vulnerability (CVSS 5.4, StylemixThemes Masterstudy Elementor Widgets)
- [CVE-2025-64208](https://cve.now/CVE-2025-64208.md): WordPress Jannah - Extensions plugin \<= 1.1.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, TieLabs Jannah - Extensions)
- [CVE-2025-64204](https://cve.now/CVE-2025-64204.md): WordPress SmartMag theme \<= 10.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeSphere SmartMag)
- [CVE-2025-64202](https://cve.now/CVE-2025-64202.md): WordPress Sahifa theme \< 5.8.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, TieLabs Sahifa)
- [CVE-2025-64201](https://cve.now/CVE-2025-64201.md): WordPress PowerPress Podcasting plugin \<= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, blubrry PowerPress Podcasting)
- [CVE-2025-64200](https://cve.now/CVE-2025-64200.md): WordPress Email Template Customizer for WooCommerce plugin \<= 1.2.17 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, VillaTheme Email Template Customizer for WooCommerce)
- [CVE-2025-64199](https://cve.now/CVE-2025-64199.md): WordPress wpresidence theme \<= 5.3.2 - Broken Access Control vulnerability (CVSS 5.3, WpEstate wpresidence)
- [CVE-2025-64197](https://cve.now/CVE-2025-64197.md): WordPress Rehub theme \< 19.9.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, sizam Rehub)
- [CVE-2025-64195](https://cve.now/CVE-2025-64195.md): WordPress Eduma theme \<= 5.7.6 - Local File Inclusion vulnerability (CVSS 7.5, ThimPress Eduma)
- [CVE-2025-64194](https://cve.now/CVE-2025-64194.md): WordPress Eduma theme \<= 5.7.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThimPress Eduma)
- [CVE-2025-60075](https://cve.now/CVE-2025-60075.md): WordPress hpb seo plugin for WordPress plugin \<= 3.0.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, Allegro Marketing hpb seo plugin for WordPress)
- [CVE-2025-58939](https://cve.now/CVE-2025-58939.md): WordPress Super Store Finder plugin \<= 7.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, highwarden Super Store Finder)
- [CVE-2025-58711](https://cve.now/CVE-2025-58711.md): WordPress Blog Designer PRO plugin \<= 3.4.8 - Broken Access Control vulnerability (CVSS 5.3, solwin Blog Designer PRO)
- [CVE-2025-11702](https://cve.now/CVE-2025-11702.md): Missing Authorization in GitLab (CVSS 8.5, GitLab)
- [CVE-2023-7320](https://cve.now/CVE-2023-7320.md): WooCommerce \<= 7.8.2 - Sensitive Information Exposure (CVSS 5.3, automattic WooCommerce)
- [CVE-2025-9544](https://cve.now/CVE-2025-9544.md): Doppler Forms \<= 2.5.1 - Subscriber+ Limited Plugin Installation (CVSS 6.5, Doppler Forms)
- [CVE-2025-49042](https://cve.now/CVE-2025-49042.md): WordPress WooCommerce plugin \<= 10.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Automattic WooCommerce)
- [CVE-2025-62776](https://cve.now/CVE-2025-62776.md): The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Li (CVSS 7.8, Wireless Tsukamoto Co. WTW EAGLE)
- [CVE-2025-11705](https://cve.now/CVE-2025-11705.md): Anti-Malware Security and Brute-Force Firewall \<= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read (CVSS 6.5, scheeeli Anti-Malware Security and Brute-Force Firewall)
- [CVE-2025-64296](https://cve.now/CVE-2025-64296.md): WordPress Facebook for WooCommerce plugin \<= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability (CVSS 5.3, Facebook for WooCommerce)
- [CVE-2025-57931](https://cve.now/CVE-2025-57931.md): WordPress Popup box plugin \<= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.3, Ays Pro Popup box)
- [CVE-2024-45161](https://cve.now/CVE-2024-45161.md): A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. (CVSS 4.6)
- [CVE-2024-45162](https://cve.now/CVE-2024-45162.md): A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field. (CVSS 9.8)
- [CVE-2025-56558](https://cve.now/CVE-2025-56558.md): The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct values of AWS\_ACCESS\_ (CVSS 3.0, Dyson MQTT server)
- [CVE-2025-57227](https://cve.now/CVE-2025-57227.md): An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted ex (CVSS 7.8)
- [CVE-2025-60320](https://cve.now/CVE-2025-60320.md): memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). (CVSS 6.7)
- [CVE-2025-60542](https://cve.now/CVE-2025-60542.md): SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call u (CVSS 6.5, typeorm)
- [CVE-2025-60595](https://cve.now/CVE-2025-60595.md): SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution. (CVSS 8.2)
- [CVE-2025-60898](https://cve.now/CVE-2025-60898.md): An unauthenticated server-side request forgery (SSRF) vulnerability in the Thumbnail via-uri endpoint of Halo CMS 2.21 allows a remote attac (CVSS 5.8)
- [CVE-2025-61156](https://cve.now/CVE-2025-61156.md): Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arb (CVSS 7.8)
- [CVE-2025-61161](https://cve.now/CVE-2025-61161.md): DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search pa (CVSS 8.4)
- [CVE-2025-61234](https://cve.now/CVE-2025-61234.md): Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 by default on the local network without authentica (CVSS 7.5)
- [CVE-2025-61429](https://cve.now/CVE-2025-61429.md): An issue in NCR Atleos Terminal Manager (ConfigApp) v3.4.0 allows attackers to escalate privileges via a crafted request. (CVSS 8.8)
- [CVE-2025-61876](https://cve.now/CVE-2025-61876.md): Insecure Direct Object Reference (IDOR) in /tenants/{id} API endpoint in Inforcer Platform version 2.0.153 allows an authenticated user with (CVSS 5.0)
- [CVE-2025-63622](https://cve.now/CVE-2025-63622.md): A vulnerability was found in code-projects Online Complaint Site 1.0. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.