CVEs published November 22, 2025
8 CVEs were published on November 22, 2025: 0 critical, 2 high.
- Published
- 8
- Critical
- 0
- High
- 2
- Medium
- 6
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- codepeople Appointment Booking Calendar
- 1
- codepeople Booking Calendar Contact Form
- 1
- codepeople CP Contact Form with PayPal
- 1
- faysal61 IDonate – Blood Donation, Request And Donor Manage…
- 1
- humanityco Cookie Notice & Compliance for GDPR / CCPA
- 1
- scottpaterson Subscriptions & Memberships for PayPal
- 1
- walterpinem OneClick Chat to Order
- 1
- westerndeal GSheetConnector For Ninja Forms
- 1
High 2
- CVE-2025-13526OneClick Chat to Order <= 1.0.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposurewalterpinem OneClick Chat to Order
- CVE-2025-13384CP Contact Form with PayPal <= 1.3.56 - Missing Authorization to Unauthenticated Arbitrary Payment Confirmationcodepeople CP Contact Form with PayPal
Medium, low and unrated 6
- CVE-2025-13318Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parametercodepeople Booking Calendar Contact Form
- CVE-2025-13136GSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposurewesterndeal GSheetConnector For Ninja Forms
- CVE-2025-12877IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletionfaysal61 IDonate – Blood Donation, Request And Donor Manage…
- CVE-2025-12752Subscriptions & Memberships for PayPal <= 1.1.7 - Unauthenticated Fake Payment Creationscottpaterson Subscriptions & Memberships for PayPal
- CVE-2025-13317Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parametercodepeople Appointment Booking Calendar
- CVE-2025-11186Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehumanityco Cookie Notice & Compliance for GDPR / CCPA