CVEs published November 27, 2025
55 CVEs were published on November 27, 2025: 9 critical, 11 high.
- Published
- 55
- Critical
- 9
- High
- 11
- Medium
- 33
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- Open-Xchange OX App Suite
- 4
- Devolutions Server
- 3
- Logpoint SIEM
- 3
- Apache Software Foundation Apache CloudStack
- 2
- Automated Logic WebCTRL · Carrier i-Vu
- 2
- ays-pro AI ChatBot with ChatGPT and Content Generator by AYS
- 2
- DirectoryThemes Tiger
- 2
- Mattermost · github.com/mattermost/mattermost/server/v8 +3
- 2
- rnags Reuters Direct
- 2
- Apache Software Foundation Apache SkyWalking · org.apache.s…
- 1
Critical 9
- CVE-2025-12421Account Takeover via Code Exchange EndpointMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2025-12419Account takeover on OAuth/OpenID-enabled serversMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2025-12140RCE in Wirtualna UczelniaSimple SA Wirtualna Uczelnia
- CVE-2025-8890Authenticated RCE in SDMC NE6037 routerSDMC NE6037
- CVE-2025-13539FindAll Membership <= 1.0.4 - Authentication Bypass via Social LoginElated Themes FindAll Membership
- CVE-2025-13540Tiare Membership <= 1.2 - Unauthenticated Privilege EscalationQode Interactive Tiare Membership
- CVE-2025-13675Tiger <= 101.2.1 - Unauthenticated Privilege EscalationDirectoryThemes Tiger
- CVE-2025-13538FindAll Listing <= 1.0.5 - Unauthenticated Privilege EscalationElated Themes FindAll Listing
- CVE-2024-5539ALC WebCTRL Carrier i-Vu Access Control BypassAutomated Logic WebCTRL · Carrier i-Vu
High 11
- CVE-2025-13757SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.Devolutions Server
- CVE-2025-13692Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Uploadunitecms Unlimited Elements for Elementor
- CVE-2025-59890Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead intEaton Galileo Software
- CVE-2025-13536Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'PowerPress Podcasting plugin by Blubrry
- CVE-2025-12758Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in thevalidator · org.webjars.npm:validator
- CVE-2025-13680Tiger <= 101.2.1 - Authenticated (Subscriber+) Privilege EscalationDirectoryThemes Tiger
- CVE-2025-7820SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypasssonalsinha21 SKT PayPal for WooCommerce
- CVE-2025-66314Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on Linux allows Accessing Functionality Not Properly Constrained by ACZTE ElasticNet UME R32
- CVE-2025-0657ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-rangeAutomated Logic WebCtrl · Automated Logic Gen5 Controlle… +1
- CVE-2025-0658Automated Logic and Carrier Zone Controllers malformed packets denial of serviceAutomated Logic Zone Controllers · Carrier Zone Controllers
- CVE-2025-66359An issue was discovered in Logpoint before 7.7.0.Logpoint SIEM
Medium, low and unrated 35
- CVE-2025-12559Information Disclosure in Common Teams APIMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-13758Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.Devolutions Server
- CVE-2025-13765Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: beDevolutions Server
- CVE-2025-12971Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulationpremio Folders – Unlimited Folders to Organize Media Librar…
- CVE-2025-54057Apache SkyWalking: Stored XSS vulnerabilityApache Software Foundation Apache SkyWalking · org.apache.s…
- CVE-2025-59302Apache CloudStack: Potential remote code execution on Javascript engine defined rulesApache Software Foundation Apache CloudStack
- CVE-2025-59454Apache CloudStack: Lack of user permission validation leading to data leak for few APIsApache Software Foundation Apache CloudStack
- CVE-2025-13742Limited HTML injection in emailspretix
- CVE-2025-10476WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actionsemrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2025-13381AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploadsays-pro AI ChatBot with ChatGPT and Content Generator by AYS
- CVE-2025-12584Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosureshapedplugin Quick View for WooCommerce
- CVE-2025-13378AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameterays-pro AI ChatBot with ChatGPT and Content Generator by AYS
- CVE-2025-59026Malicious content uploaded as file can be used to execute script code when following attacker-controlled links.Open-Xchange OX App Suite
- CVE-2025-59025Malicious e-mail content can be used to execute script code.Open-Xchange OX App Suite
- CVE-2025-30190Malicious content at office documents can be used to inject script code when editing a document.Open-Xchange OX App Suite
- CVE-2025-30186Malicious content uploaded as file can be used to execute script code when following attacker-controlled links.Open-Xchange OX App Suite
- CVE-2025-13157QODE Wishlist for WooCommerce <= 1.2.7 - Unauthenticated Insecure Direct Object Reference to Wishlist Updateqodeinteractive QODE Wishlist for WooCommerce
- CVE-2025-13441Hide Category by User Role for WooCommerce <= 2.3.1 - Missing Authorization to Unauthenticated Cache Flushingthemesupport Hide Category by User Role for WooCommerce
- CVE-2025-13143Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.12.0 - Cross-Site Request Forgery to Account Disconnectionassafp Quiz, Poll & Survey Maker by Opinion Stage
- CVE-2025-13525WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameterwpdirectorykit WP Directory Kit
- CVE-2025-12123Customer Reviews Collector for WooCommerce <= 4.6.1 - Reflected Cross-Site Scriptingtrustindex Customer Reviews Collector for WooCommerce
- CVE-2025-12185StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scriptingera404 StaffList
- CVE-2025-12151Simple Folio <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scriptingpresstigers Simple Folio
- CVE-2025-3784Information Disclosure Vulnerability in GX Works2Mitsubishi Electric GX Works2
- CVE-2025-13762Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305CyberArk Secure Web Sessions Extension
- CVE-2025-12713Soundslides <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundslides Shortcodewpoets Soundslides
- CVE-2025-12670wp-twitpic <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingrealin wp-twitpic
- CVE-2025-12649SortTable Post <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodesscovil SortTable Post
- CVE-2025-12579Reuters Direct <= 3.0.0 - Missing Authorization to Unauthenticated Settings Resetrnags Reuters Direct
- CVE-2025-12712Shouty <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shouty Shortcode Attributesgungorbudak Shouty
- CVE-2025-12666Google Drive upload and download link <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingoscaruh Google Drive upload and download link
- CVE-2025-12578Reuters Direct <= 3.0.0 - Cross-Site Request Forgery to Settings Resetrnags Reuters Direct
- CVE-2024-5540ALC WebCTRL Carrier i-Vu Reflected Cross-Site ScriptingAutomated Logic WebCTRL · Carrier i-Vu
- CVE-2025-66360An issue was discovered in Logpoint before 7.7.0.Logpoint SIEM
- CVE-2025-66361An issue was discovered in Logpoint before 7.7.0.Logpoint SIEM