# CVEs published 2025-11-18

182 CVEs were published on November 18, 2025: 17 critical, 42 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-65015](https://cve.now/CVE-2025-65015.md): joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads (CVSS 9.2, authlib joserfc · joserfc)
- [CVE-2025-65093](https://cve.now/CVE-2025-65093.md): LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax\_output.php endpoint (CVSS 5.5, librenms · librenms/librenms)
- [CVE-2025-65014](https://cve.now/CVE-2025-65014.md): LibreNMS has Weak Password Policy (CVSS 3.7, librenms · librenms/librenms)
- [CVE-2025-65013](https://cve.now/CVE-2025-65013.md): LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint \`/maps/nodeimage\` parameter \`Image Name\` (CVSS 6.2, librenms · librenms/librenms)
- [CVE-2025-65012](https://cve.now/CVE-2025-65012.md): Kirby CMS has cross-site scripting (XSS) in the changes dialog (CVSS 5.1, getkirby kirby · getkirby/cms)
- [CVE-2025-64515](https://cve.now/CVE-2025-64515.md): Open Forms prefill data in read-only components can be tampered (CVSS 4.3, open-formulieren open-forms)
- [CVE-2025-64325](https://cve.now/CVE-2025-64325.md): Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard (CVSS 8.4, EmbySupport Emby.Security)
- [CVE-2025-62406](https://cve.now/CVE-2025-62406.md): Piwigo is vulnerable to one-click account takeover by modifying the password-reset link (CVSS 8.1, Piwigo)
- [CVE-2025-54990](https://cve.now/CVE-2025-54990.md): XWiki AdminTools application doesn't set permissions on the AdminTools space (CVSS 5.3, xwikisas application-admintools · com.xwiki.admintools:appl…)
- [CVE-2025-64324](https://cve.now/CVE-2025-64324.md): KubeVirt Vulnerable to Arbitrary Host File Read and Write (CVSS 8.5, kubevirt · kubevirt.io/kubevirt)
- [CVE-2025-12119](https://cve.now/CVE-2025-12119.md): Bulk write with options may read invalid memory (CVSS 6.9, MongoDB C Driver · MongoDB PHP Driver +1)
- [CVE-2025-37162](https://cve.now/CVE-2025-37162.md): Authenticated Command Injection Vulnerability Leading to Arbitrary Remote Command Execution (CVSS 6.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking 100 S…)
- [CVE-2025-37161](https://cve.now/CVE-2025-37161.md): Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in Web Management Interface (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking 100 S…)
- [CVE-2025-37163](https://cve.now/CVE-2025-37163.md): Authenticated Command Injection Vulnerability in HPE Aruba Networking Management Software (AirWave) CLI (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Manag…)
- [CVE-2025-52639](https://cve.now/CVE-2025-52639.md): HCL Connections is vulnerable to sensitive information disclosure (CVSS 3.5, HCL Software Connections)
- [CVE-2025-37160](https://cve.now/CVE-2025-37160.md): Authenticated Broken Access Control (BAC) in REST API Configuration Service (CVSS 5.3, Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX)
- [CVE-2025-37159](https://cve.now/CVE-2025-37159.md): Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software (CVSS 5.8, Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX)
- [CVE-2025-37158](https://cve.now/CVE-2025-37158.md): Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX (CVSS 6.7, Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX)
- [CVE-2025-37157](https://cve.now/CVE-2025-37157.md): Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX (CVSS 6.7, Hewlett Packard Enterprise (HPE) HPE Aruba Networkign AOS-CX)
- [CVE-2025-37156](https://cve.now/CVE-2025-37156.md): ArubaOS-CX Platform-Level Denial-of-Service Vulnerability (CVSS 6.8, Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX)
- [CVE-2025-37155](https://cve.now/CVE-2025-37155.md): Authenticated Privilege Escalation Allows Unauthorized Access in Network Management Interface (CVSS 7.8, Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX)
- [CVE-2025-54770](https://cve.now/CVE-2025-54770.md): Grub2: use-after-free in net\_set\_vlan (CVSS 4.9, GNU grub2 · Red Hat Enterprise Linux +1)
- [CVE-2025-61664](https://cve.now/CVE-2025-61664.md): Grub2: missing unregister call for normal\_exit command may lead to use-after-free (CVSS 4.9, GNU grub2 · Red Hat Enterprise Linux +1)
- [CVE-2025-61663](https://cve.now/CVE-2025-61663.md): Grub2: missing unregister call for normal commands may lead to use-after-free (CVSS 4.9, GNU grub2 · Red Hat Enterprise Linux +1)
- [CVE-2025-61662](https://cve.now/CVE-2025-61662.md): Grub2: missing unregister call for gettext command may lead to use-after-free (CVSS 7.8, GNU grub2 · Red Hat Enterprise Linux +1)
- [CVE-2025-61661](https://cve.now/CVE-2025-61661.md): Grub2: grub2: out-of-bounds write via malicious usb device (CVSS 4.8, GNU grub2 · Red Hat Enterprise Linux +1)
- [CVE-2025-54771](https://cve.now/CVE-2025-54771.md): Grub2: use-after-free in grub\_file\_close() (CVSS 4.9, GNU grub2 · Red Hat Enterprise Linux +1)
- [CVE-2025-53843](https://cve.now/CVE-2025-53843.md): A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, (CVSS 6.9, Fortinet FortiOS)
- [CVE-2025-48839](https://cve.now/CVE-2025-48839.md): An Out-of-bounds Write vulnerability \[CWE-787\] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versio (CVSS 6.3, Fortinet FortiADC)
- [CVE-2025-54821](https://cve.now/CVE-2025-54821.md): An Improper Privilege Management vulnerability \[CWE-269\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11 (CVSS 1.7, Fortinet FortiOS · Fortinet FortiProxy +1)
- [CVE-2025-58413](https://cve.now/CVE-2025-58413.md): A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, (CVSS 6.9, Fortinet FortiOS · Fortinet FortiSASE)
- [CVE-2025-46215](https://cve.now/CVE-2025-46215.md): An Improper Isolation or Compartmentalization vulnerability \[CWE-653\] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 throu (CVSS 5.0, Fortinet FortiSandbox)
- [CVE-2025-59669](https://cve.now/CVE-2025-59669.md): A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 (CVSS 4.8, Fortinet FortiWeb)
- [CVE-2025-54660](https://cve.now/CVE-2025-54660.md): An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientW (CVSS 4.9, Fortinet FortiClientWindows)
- [CVE-2025-61713](https://cve.now/CVE-2025-61713.md): A Cleartext Storage of Sensitive Information in Memory vulnerability \[CWE-316\] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiP (CVSS 3.8, Fortinet FortiPAM)
- [CVE-2025-46776](https://cve.now/CVE-2025-46776.md): A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiE (CVSS 6.3, Fortinet FortiExtender)
- [CVE-2025-46775](https://cve.now/CVE-2025-46775.md): A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through (CVSS 5.2, Fortinet FortiExtender)
- [CVE-2025-54971](https://cve.now/CVE-2025-54971.md): An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC (CVSS 3.9, Fortinet FortiADC)
- [CVE-2025-54972](https://cve.now/CVE-2025-54972.md): An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 thr (CVSS 3.9, Fortinet FortiMail)
- [CVE-2025-46373](https://cve.now/CVE-2025-46373.md): A Heap-based Buffer Overflow vulnerability \[CWE-122\] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7. (CVSS 7.1, Fortinet FortiClientWindows)
- [CVE-2025-58692](https://cve.now/CVE-2025-58692.md): An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 7.7, Fortinet FortiVoice)
- [CVE-2025-58034](https://cve.now/CVE-2025-58034.md): An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability \[CWE-78\] vulnerability in Fortin (CVSS 6.7, KEV, Fortinet FortiWeb)
- [CVE-2025-47761](https://cve.now/CVE-2025-47761.md): An Exposed IOCTL with Insufficient Access Control vulnerability \[CWE-782\] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, (CVSS 7.1, Fortinet FortiClientWindows)
- [CVE-2025-33184](https://cve.now/CVE-2025-33184.md): NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. (CVSS 7.8, NVIDIA Isaac-GR00T N1.5)
- [CVE-2025-33183](https://cve.now/CVE-2025-33183.md): NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. (CVSS 7.8, NVIDIA Isaac-GR00T N1.5)
- [CVE-2025-12761](https://cve.now/CVE-2025-12761.md): Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116 (CVSS 3.5, Drupal Simple multi step form · drupal/simple\_multistep)
- [CVE-2025-12760](https://cve.now/CVE-2025-12760.md): Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-115 (CVSS 5.4, Drupal Email TFA · drupal/email\_tfa)
- [CVE-2025-13083](https://cve.now/CVE-2025-13083.md): Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 (CVSS 3.7, Drupal core · drupal/core)
- [CVE-2025-13082](https://cve.now/CVE-2025-13082.md): Drupal core - Moderately critical - Defacement - SA-CORE-2025-007 (CVSS 4.3, Drupal core · drupal/core)
- [CVE-2025-13081](https://cve.now/CVE-2025-13081.md): Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006 (CVSS 5.9, Drupal core · drupal/core)
- [CVE-2025-13080](https://cve.now/CVE-2025-13080.md): Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005 (CVSS 5.3, Drupal core · drupal/core)
- [CVE-2025-34324](https://cve.now/CVE-2025-34324.md): GoSign Desktop \< 2.4.1 Insecure Update Mechanism RCE (CVSS 7.0, Tinexta InfoCert S.p.A. GoSign Desktop)
- [CVE-2025-53360](https://cve.now/CVE-2025-53360.md): pluginsGLPI's Database Inventory Plugin allows any authenticated user to send agent requests (CVSS 4.3, pluginsGLPI databaseinventory)
- [CVE-2025-9977](https://cve.now/CVE-2025-9977.md): Improper neutralization of input in Times Software E-PAYROLL (CVSS 5.3, Times Software E-Payroll)
- [CVE-2025-55074](https://cve.now/CVE-2025-55074.md): Channel member objects leak read status (CVSS 3.0, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-12383](https://cve.now/CVE-2025-12383.md): Race Condition allows Bypass of Trust Restrictions (CVSS 9.4, Eclipse Foundation Jersey · org.glassfish.jersey.core:jerse…)
- [CVE-2025-58121](https://cve.now/CVE-2025-58121.md): Insufficient permission validation on multiple REST API endpoints (CVSS 5.3, Checkmk)
- [CVE-2025-58122](https://cve.now/CVE-2025-58122.md): Insufficient permission validation when configuring notification parameters (CVSS 5.3, Checkmk)
- [CVE-2025-64996](https://cve.now/CVE-2025-64996.md): Overly broad file permissions in the mk\_inotify plugin allows reading and manipulating the plugin's output (CVSS 4.8, Checkmk)
- [CVE-2025-10158](https://cve.now/CVE-2025-10158.md): Rsync: Out of bounds array access via negative index (CVSS 4.3, rsync)
- [CVE-2025-13349](https://cve.now/CVE-2025-13349.md): SourceCodester Student Grades Management System Add New Grade grades.php cross site scripting (CVSS 5.1, SourceCodester Student Grades Management System)
- [CVE-2025-55179](https://cve.now/CVE-2025-55179.md): Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsAp (CVSS 5.4, Facebook WhatsApp Business for iOS · Facebook WhatsApp f… +1)
- [CVE-2025-12545](https://cve.now/CVE-2025-12545.md): Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more \<= 1.49.2 - Unauthenticated Information Exposure (CVSS 5.3, alekv Pixel Manager for WooCommerce – Conversion Tracking,…)
- [CVE-2025-12376](https://cve.now/CVE-2025-12376.md): Icon List Block – Add Icon-Based Lists with Custom Styles \<= 1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery (CVSS 6.4, bplugins Icon List Block – Add Icon-Based Lists with Custom…)
- [CVE-2025-59116](https://cve.now/CVE-2025-59116.md): User enumeration in Windu CMS (CVSS 6.9, JCD Windu CMS)
- [CVE-2025-59111](https://cve.now/CVE-2025-59111.md): Broken Access Control in Windu CMS (CVSS 6.9, JCD Windu CMS)
- [CVE-2025-59117](https://cve.now/CVE-2025-59117.md): Multiple Stored XSS in Windu CMS (CVSS 4.8, JCD Windu CMS)
- [CVE-2025-59115](https://cve.now/CVE-2025-59115.md): Stored XSS in Windu CMS (CVSS 5.3, JCD Windu CMS)
- [CVE-2025-59114](https://cve.now/CVE-2025-59114.md): Cross-Site Request Forgery in Windu CMS (CVSS 5.1, JCD Windu CMS)
- [CVE-2025-59113](https://cve.now/CVE-2025-59113.md): Bruteforce Protection Bypass in Windu CMS (CVSS 6.9, JCD Windu CMS)
- [CVE-2025-59112](https://cve.now/CVE-2025-59112.md): Cross-Site Request Forgery in Windu CMS (CVSS 5.1, JCD Windu CMS)
- [CVE-2025-59110](https://cve.now/CVE-2025-59110.md): Cross-Site Request Forgery in Windu CMS (CVSS 6.8, JCD Windu CMS)
- [CVE-2025-13347](https://cve.now/CVE-2025-13347.md): SourceCodester Train Station Ticketing System ajax.php sql injection (CVSS 5.3, SourceCodester Train Station Ticketing System)
- [CVE-2025-13346](https://cve.now/CVE-2025-13346.md): SourceCodester Train Station Ticketing System ajax.php sql injection (CVSS 5.3, SourceCodester Train Station Ticketing System)
- [CVE-2025-8084](https://cve.now/CVE-2025-8084.md): AI Engine \<= 3.1.8 - Authenticated (Editor+) Server-Side Request Forgery (CVSS 6.8, tigroumeow AI Engine – The Chatbot, AI Framework & MCP for…)
- [CVE-2025-9312](https://cve.now/CVE-2025-9312.md): Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products (CVSS 9.8, WSO2 API Manager · WSO2 API Control Plane +8)
- [CVE-2025-13345](https://cve.now/CVE-2025-13345.md): SourceCodester Train Station Ticketing System ajax.php sql injection (CVSS 5.3, SourceCodester Train Station Ticketing System)
- [CVE-2025-13344](https://cve.now/CVE-2025-13344.md): SourceCodester Train Station Ticketing System ajax.php sql injection (CVSS 6.9, SourceCodester Train Station Ticketing System)
- [CVE-2025-13343](https://cve.now/CVE-2025-13343.md): SourceCodester Interview Management System editQuestion.php cross site scripting (CVSS 5.1, SourceCodester Interview Management System)
- [CVE-2025-6670](https://cve.now/CVE-2025-6670.md): Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services (CVSS 8.8, WSO2 Open Banking AM · WSO2 Open Banking IAM +7)
- [CVE-2025-41350](https://cve.now/CVE-2025-41350.md): Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este (CVSS 5.1, Informatica del Este WinPlus)
- [CVE-2025-41349](https://cve.now/CVE-2025-41349.md): Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este (CVSS 5.1, Informatica del Este WinPlus)
- [CVE-2025-41348](https://cve.now/CVE-2025-41348.md): Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este (CVSS 8.7, Informatica del Este WinPlus)
- [CVE-2025-41347](https://cve.now/CVE-2025-41347.md): Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este (CVSS 8.7, Informatica del Este WinPlus)
- [CVE-2025-11427](https://cve.now/CVE-2025-11427.md): WP Migrate Lite \<= 2.7.6 - Unauthenticated Blind Server-Side Request Forgery (CVSS 5.8, wpengine WP Migrate Lite – Migration Made Easy)
- [CVE-2025-41737](https://cve.now/CVE-2025-41737.md): Improper access control via php endpoint (CVSS 7.5, METZ CONNECT Energy-Controlling EWIO2-M · METZ CONNECT E… +1)
- [CVE-2025-41736](https://cve.now/CVE-2025-41736.md): Possible arbitrary code execution (CVSS 8.8, METZ CONNECT Energy-Controlling EWIO2-M · METZ CONNECT E… +1)
- [CVE-2025-41735](https://cve.now/CVE-2025-41735.md): Possible arbitrary file upload (CVSS 8.8, METZ CONNECT Energy-Controlling EWIO2-M · METZ CONNECT E… +1)
- [CVE-2025-41734](https://cve.now/CVE-2025-41734.md): Unauthenticated Local File Inclusion in php module (CVSS 9.8, METZ CONNECT Energy-Controlling EWIO2-M · METZ CONNECT E… +1)
- [CVE-2025-41733](https://cve.now/CVE-2025-41733.md): Possible malfunction credential injection (CVSS 9.8, METZ CONNECT Energy-Controlling EWIO2-M · METZ CONNECT E… +1)
- [CVE-2025-41346](https://cve.now/CVE-2025-41346.md): Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este (CVSS 9.3, Informatica del Este WinPlus)
- [CVE-2025-12391](https://cve.now/CVE-2025-12391.md): Restrictions for BuddyPress \<= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update (CVSS 5.3, seventhqueen Restrictions for BuddyPress)
- [CVE-2025-12457](https://cve.now/CVE-2025-12457.md): Enable SVG, WebP, and ICO Upload \<= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads (CVSS 6.4, ideastocode Enable SVG, WebP, and ICO Upload)
- [CVE-2025-12691](https://cve.now/CVE-2025-12691.md): Photonic Gallery & Lightbox for Flickr, SmugMug & Others \<= 3.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Caption Attribute (CVSS 6.4, sayontan Photonic Gallery & Lightbox for Flickr, SmugMug &…)
- [CVE-2025-12639](https://cve.now/CVE-2025-12639.md): wModes – Catalog Mode, Product Pricing, Enquiry Forms & Promotions | for WooCommerce \<= 1.2.2 - Missing Authorization to Sensitive Information Disclosure (CVSS 4.3, sundayfanz wModes – Catalog Mode, Product Pricing, Enquiry…)
- [CVE-2025-12392](https://cve.now/CVE-2025-12392.md): Cryptocurrency Payment Gateway for WooCommerce \<= 2.0.25 - Missing Authorization to Unauthenticated Tracking Status Update (CVSS 5.3, tripleatechnology Cryptocurrency Payment Gateway for WooCom…)
- [CVE-2025-12088](https://cve.now/CVE-2025-12088.md): Meta Display Block \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, bhargavbhandari90 Meta Display Block)
- [CVE-2025-12481](https://cve.now/CVE-2025-12481.md): WP Duplicate Page \<= 1.7 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure (CVSS 4.3, ninjateam WP Duplicate Page)
- [CVE-2025-13069](https://cve.now/CVE-2025-13069.md): Enable SVG, WebP, and ICO Upload \<= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass (CVSS 8.8, ideastocode Enable SVG, WebP, and ICO Upload)
- [CVE-2025-12079](https://cve.now/CVE-2025-12079.md): WP Twitter Auto Publish \<= 1.7.4 - Reflected Cross-Site Scripting via PostMessage (CVSS 6.1, f1logic WP Twitter Auto Publish)
- [CVE-2025-13133](https://cve.now/CVE-2025-13133.md): Simple User Import Export \<= 1.1.7 - Authenticated (Admin+) CSV Injection (CVSS 6.6, vaniivan Simple User Import Export)
- [CVE-2025-12955](https://cve.now/CVE-2025-12955.md): Live sales notification for WooCommerce \<= 2.3.39 - Missing Authorization to Unauthenticated Customer Data Exposure (CVSS 7.5, rajeshsingh520 PiWeb Live sales notification for WooCommerce)
- [CVE-2025-13196](https://cve.now/CVE-2025-13196.md): Element Pack Addons for Elementor \<= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget (CVSS 5.4, bdthemes Element Pack – Widgets, Templates & Addons for Ele…)
- [CVE-2025-4212](https://cve.now/CVE-2025-4212.md): Checkout Files Upload for WooCommerce \<= 2.2.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, wpwham Checkout Files Upload for WooCommerce)
- [CVE-2025-11734](https://cve.now/CVE-2025-11734.md): Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links \<= 1.2.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Trashing (CVSS 5.4, Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal…)
- [CVE-2025-40545](https://cve.now/CVE-2025-40545.md): SolarWinds Observability Self-Hosted Open Redirection Vulnerability (CVSS 4.8, SolarWinds Observability Self-Hosted)
- [CVE-2025-26391](https://cve.now/CVE-2025-26391.md): SolarWinds Observability Self-Hosted XSS Vulnerability (CVSS 5.4, SolarWinds Observability Self-Hosted)
- [CVE-2025-40549](https://cve.now/CVE-2025-40549.md): SolarWinds Serv-U Path Restriction Bypass Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2025-40548](https://cve.now/CVE-2025-40548.md): SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2025-40547](https://cve.now/CVE-2025-40547.md): SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2025-11868](https://cve.now/CVE-2025-11868.md): everviz \<= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, everviz – Charts, Maps and Tables – Interactive and respons…)
- [CVE-2025-12078](https://cve.now/CVE-2025-12078.md): ArtiBot Free Chat Bot for WebSites \<= 1.1.7 - Reflected Cross-Site Scripting via PostMessage (CVSS 6.1, ArtiBot Free Chat Bot for WebSites)
- [CVE-2025-12406](https://cve.now/CVE-2025-12406.md): Project Honey Pot Spam Trap \<= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, awensley Project Honey Pot Spam Trap)
- [CVE-2025-12961](https://cve.now/CVE-2025-12961.md): Download Panel \<= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification (CVSS 4.3, arkadiykilesso Download Panel)
- [CVE-2025-13088](https://cve.now/CVE-2025-13088.md): Category and Product Woocommerce Tabs \<= 1.0 - Authenticated (Contributor+) Local File Inclusion (CVSS 8.8, ikhodal Category and Product Woocommerce Tabs)
- [CVE-2025-12372](https://cve.now/CVE-2025-12372.md): The Permalinks Cascade \<= 2.2 - Missing Authorization To Authenticated (Subscriber+) Plugin Settings Update (CVSS 4.3, \_luigi The Permalinks Cascade)
- [CVE-2025-12775](https://cve.now/CVE-2025-12775.md): WP Dropzone \<= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, nazsabuz WP Dropzone)
- [CVE-2025-8609](https://cve.now/CVE-2025-8609.md): RTMKit Addons \<= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute (CVSS 6.4, rometheme RTMKit)
- [CVE-2025-12173](https://cve.now/CVE-2025-12173.md): WP Admin Microblog \<= 3.1.1 - Cross-Site Request Forgery to Message Creation (CVSS 4.3, winkm89 WP Admin Microblog)
- [CVE-2025-12937](https://cve.now/CVE-2025-12937.md): ACF Flexible Layouts Manager \<= 1.1.6 - Missing Authorization to Unauthenticated Custom Field Update (CVSS 6.5, valentinpellegrin ACF Flexible Layouts Manager)
- [CVE-2025-8605](https://cve.now/CVE-2025-8605.md): Gutenify - Visual Site Builder Blocks & Site Templates \<= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block (CVSS 6.4, codeyatri Gutenify – Visual Site Builder Blocks & Site Temp…)
- [CVE-2025-12827](https://cve.now/CVE-2025-12827.md): Top Friends \<= 0.3 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, denishua Top Friends)
- [CVE-2025-12962](https://cve.now/CVE-2025-12962.md): Local Syndication \<= 1.5a - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode (CVSS 6.4, willbontrager Local Syndication)
- [CVE-2025-12404](https://cve.now/CVE-2025-12404.md): Like-it \<= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, nikolayyordanov Like-it)
- [CVE-2025-12823](https://cve.now/CVE-2025-12823.md): CSV to SortTable \<= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, sscovil CSV to SortTable)
- [CVE-2025-9625](https://cve.now/CVE-2025-9625.md): Coil Web Monetization \<= 2.0.2 - Cross-Site Request Forgery (CVSS 4.3, interledger Coil Web Monetization)
- [CVE-2025-12528](https://cve.now/CVE-2025-12528.md): Pie Forms for WP \<= 1.6 - Unauthenticated Arbitrary File Upload (CVSS 8.1, genetechproducts Pie Forms — Drag & Drop Form Builder)
- [CVE-2025-11620](https://cve.now/CVE-2025-11620.md): Multiple Roles per User \<= 1.0 - Missing Authorization to Authenticated (Custom+) Privilege Escalation (CVSS 7.2, jemoreto Multiple Roles per User)
- [CVE-2025-12411](https://cve.now/CVE-2025-12411.md): Premmerce Wholesale Pricing for WooCommerce \<= 1.1.10 - Authenticated (Subscriber+) SQL Injection (CVSS 7.1, Premmerce Wholesale Pricing for WooCommerce)
- [CVE-2025-8727](https://cve.now/CVE-2025-8727.md): A stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL). (CVSS 7.2, SMCI X13SEDW-F)
- [CVE-2025-8404](https://cve.now/CVE-2025-8404.md): Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library (CVSS 5.5, SMCI MBD-X13SEDW-F)
- [CVE-2025-10089](https://cve.now/CVE-2025-10089.md): Malicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S (CVSS 7.7, Mitsubishi Electric MILCO.S Setting Application · Mitsub… +1)
- [CVE-2025-11265](https://cve.now/CVE-2025-11265.md): VK All in One Expansion Unit \<= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, kurudrive VK All in One Expansion Unit)
- [CVE-2025-11267](https://cve.now/CVE-2025-11267.md): VK All in One Expansion Unit \<= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, kurudrive VK All in One Expansion Unit)
- [CVE-2025-8076](https://cve.now/CVE-2025-8076.md): A stack buffer overflow vulnerability exists in the Supermicro BMC Web function (CVSS 7.2, SMCI MBD-X13SEDW-F)
- [CVE-2025-7623](https://cve.now/CVE-2025-7623.md): Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability (CVSS 5.4, SMCI MBD-X13SEDW-F)
- [CVE-2025-12524](https://cve.now/CVE-2025-12524.md): Post Type Switcher \<= 4.0.0 - Insecure Direct Object Reference to Authenticated (Author+) Post Type Change (CVSS 5.4, johnjamesjacoby Post Type Switcher)
- [CVE-2025-48593](https://cve.now/CVE-2025-48593.md): In bta\_hf\_client\_cb\_init of bta\_hf\_client\_main.cc, there is a possible remote code execution due to a use after free. (CVSS 8.0, Google Android)
- [CVE-2025-12974](https://cve.now/CVE-2025-12974.md): Gravity Forms \<= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked Upload (CVSS 8.1, Gravity Forms)
- [CVE-2025-64734](https://cve.now/CVE-2025-64734.md): Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to pe (CVSS 2.4, Gallagher T21 Reader)
- [CVE-2025-52578](https://cve.now/CVE-2025-52578.md): Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker w (CVSS 5.7, Gallagher High Sec End of Line Module)
- [CVE-2025-52457](https://cve.now/CVE-2025-52457.md): Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific (CVSS 5.7, Gallagher HBUS Devices)
- [CVE-2025-8693](https://cve.now/CVE-2025-8693.md): A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earli (CVSS 8.8, Zyxel DX3300-T0 firmware)
- [CVE-2025-6599](https://cve.now/CVE-2025-6599.md): An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could (CVSS 5.3, Zyxel DX3301-T0 firmware)
- [CVE-2025-12792](https://cve.now/CVE-2025-12792.md): The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. (CVSS 3.2, Canva)
- [CVE-2025-13325](https://cve.now/CVE-2025-13325.md): itsourcecode Student Information System enrollment\_edit1.php sql injection (CVSS 5.3, itsourcecode Student Information System)
- [CVE-2025-13323](https://cve.now/CVE-2025-13323.md): code-projects Simple Pizza Ordering System listorder.php sql injection (CVSS 6.9, code-projects Simple Pizza Ordering System)
- [CVE-2025-54320](https://cve.now/CVE-2025-54320.md): In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerabilit (CVSS 4.3)
- [CVE-2025-54321](https://cve.now/CVE-2025-54321.md): In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabi (CVSS 9.8)
- [CVE-2025-55796](https://cve.now/CVE-2025-55796.md): The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup con (CVSS 7.5)
- [CVE-2025-56499](https://cve.now/CVE-2025-56499.md): Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated p (CVSS 6.5)
- [CVE-2025-56526](https://cve.now/CVE-2025-56526.md): Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF. (CVSS 6.1)
- [CVE-2025-56527](https://cve.now/CVE-2025-56527.md): Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage. (CVSS 7.5)
- [CVE-2025-56643](https://cve.now/CVE-2025-56643.md): Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. (CVSS 9.1)
- [CVE-2025-60455](https://cve.now/CVE-2025-60455.md): Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvcache-agent" feature i (CVSS 8.4, max · modular)
- [CVE-2025-63215](https://cve.now/CVE-2025-63215.md): The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. (CVSS 7.2)
- [CVE-2025-63216](https://cve.now/CVE-2025-63216.md): The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. (CVSS 10.0)
- [CVE-2025-63217](https://cve.now/CVE-2025-63217.md): The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. (CVSS 9.8)
- [CVE-2025-63225](https://cve.now/CVE-2025-63225.md): The Eurolab ELTS100\_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on crit (CVSS 9.8)
- [CVE-2025-63226](https://cve.now/CVE-2025-63226.md): The Sencore SMP100 SMP Media Platform (firmware versions V4.2.160, V60.1.4, V60.1.29) is vulnerable to session hijacking due to improper ses (CVSS 5.7)
- [CVE-2025-63227](https://cve.now/CVE-2025-63227.md): The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /pat (CVSS 7.2)
- [CVE-2025-63228](https://cve.now/CVE-2025-63228.md): The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the / (CVSS 9.8)
- [CVE-2025-63229](https://cve.now/CVE-2025-63229.md): The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting (XSS) vulnerability (CVSS 5.4)
- [CVE-2025-63258](https://cve.now/CVE-2025-63258.md): A remote command execution (RCE) vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series routers, cloud gateways (CVSS 6.5)
- [CVE-2025-63408](https://cve.now/CVE-2025-63408.md): Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to (CVSS 5.1)
- [CVE-2025-63512](https://cve.now/CVE-2025-63512.md): kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. (CVSS 6.5)
- [CVE-2025-63513](https://cve.now/CVE-2025-63513.md): kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functi (CVSS 6.5)
- [CVE-2025-63514](https://cve.now/CVE-2025-63514.md): kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter. (CVSS 6.1)
- [CVE-2025-63602](https://cve.now/CVE-2025-63602.md): A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) a (CVSS 7.3)
- [CVE-2025-63603](https://cve.now/CVE-2025-63603.md): A command injection vulnerability exists in the MCP Data Science Server's (reading-plus-ai/mcp-server-data-exploration) 0.1.6 in the safe\_ev (CVSS 6.5)
- [CVE-2025-63604](https://cve.now/CVE-2025-63604.md): A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insuffici (CVSS 6.5)
- [CVE-2025-63693](https://cve.now/CVE-2025-63693.md): The comment editing template (dzz/comment/template/edit\_form.htm) in DzzOffice 2.3.x lacks adequate security escaping for user-controllable (CVSS 5.4)
- [CVE-2025-63694](https://cve.now/CVE-2025-63694.md): DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage. (CVSS 9.8)
- [CVE-2025-63695](https://cve.now/CVE-2025-63695.md): DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php. (CVSS 9.8)
- [CVE-2025-63749](https://cve.now/CVE-2025-63749.md): pnetlab 5.3.11 is vulnerable to Command Injection via the qemu\_options parameter. (CVSS 6.5)
- [CVE-2025-63800](https://cve.now/CVE-2025-63800.md): The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due to missing (CVSS 7.5)
- [CVE-2025-63828](https://cve.now/CVE-2025-63828.md): Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leadin (CVSS 6.1, backdrop/backdrop)
- [CVE-2025-63829](https://cve.now/CVE-2025-63829.md): eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time\_t:: fraction() function. (CVSS 5.3)
- [CVE-2025-63883](https://cve.now/CVE-2025-63883.md): A DOM-based cross-site scripting vulnerability exists in electic-shop v1.0 (Bhabishya-123/E-commerce). (CVSS 5.4)
- [CVE-2025-63892](https://cve.now/CVE-2025-63892.md): A vulnerability was determined in SourceCodester Student Grades Management System 1.0. (CVSS 6.8)
- [CVE-2025-63955](https://cve.now/CVE-2025-63955.md): A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an at (CVSS 7.5)
- [CVE-2025-64076](https://cve.now/CVE-2025-64076.md): Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode\_definite\_long\_string() function of the C extension decoder (sour (CVSS 7.5, cbor2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-11-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.