CVEs published December 6, 2025
66 CVEs were published on December 6, 2025: 2 critical, 25 high.
- Published
- 66
- Critical
- 2
- High
- 25
- Medium
- 29
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- Linux
- 23
- Linksys RE6500 · Linksys RE6250 +4
- 4
- UTT 进取
- 3
- Accessiy by CodeConfig – Accessibility Widgets for ADA, EAA…
- 2
- garidium g-FFL Cockpit
- 2
- passionui Listar – Directory Listing & Classifieds WordPres…
- 2
- 10Web Booster – Website speed optimization, Cache & Page Sp…
- 1
- ajitdas Flex QR Code Generator
- 1
- arnabkumar Cute News Ticker
- 1
- brainstormforce Starter Templates – AI-Powered Templates fo…
- 1
Critical 2
High 25
- CVE-2025-40285smb/server: fix possible refcount leak in smb2_sess_setup()Linux
- CVE-2025-40284Bluetooth: MGMT: cancel mesh send timer when hdev removedLinux
- CVE-2025-40283Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAFLinux
- CVE-2025-40282Bluetooth: 6lowpan: reset link-local header on ipv6 recv pathLinux
- CVE-2025-40280tipc: Fix use-after-free in tipc_mon_reinit_self().Linux
- CVE-2025-40277drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZELinux
- CVE-2025-40276drm/panthor: Flush shmem writes before mapping buffers CPU-uncachedLinux
- CVE-2025-40274KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dyingLinux
- CVE-2025-40273NFSD: free copynotify stateid in nfs4_free_ol_stateid()Linux
- CVE-2025-40272mm/secretmem: fix use-after-free race in fault handlerLinux
- CVE-2025-40271fs/proc: fix uaf in proc_readdir_de()Linux
- CVE-2025-40270mm, swap: fix potential UAF issue for VMA readaheadLinux
- CVE-2025-40269ALSA: usb-audio: Fix potential overflow of PCM transfer bufferLinux
- CVE-2025-14141UTT 进取 520W formArpBindConfig strcpy buffer overflowUTT 进取
- CVE-2025-14140UTT 进取 520W websHostFilter strcpy buffer overflowUTT 进取
- CVE-2025-14136Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflowLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-14135Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wired_clientlist_setClientsName stack-based overflowLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-14134Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflowLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-14133Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wireless_clientlist_setClientsName stack-based overflowLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-14126TOZED ZLT M30S/ZLT M30S PRO Web hard-coded credentialsTOZED ZLT M30S
- CVE-2025-13065Starter Templates <= 4.4.41 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypassbrainstormforce Starter Templates – AI-Powered Templates fo…
- CVE-2025-12966All-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIPplugins360 All-in-One Video Gallery
- CVE-2025-12499Rich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google Reviewwidgetpack Rich Showcase for Google Reviews
- CVE-2025-13292Improper access control in Google Cloud Apigee-X allows cross-tenant Analytics modification and log data access.Google Cloud Apigee-X
- CVE-2025-12510Widgets for Google Reviews <= 13.2.4 - Unauthenticated Stored Cross-Site Scripting via Google Reviewstrustindex Widgets for Google Reviews
Medium, low and unrated 39
- CVE-2025-40289drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAMLinux
- CVE-2025-40288drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devicesLinux
- CVE-2025-40287exfat: fix improper check of dentry.stream.valid_sizeLinux
- CVE-2025-40286smb/server: fix possible memory leak in smb2_read()Linux
- CVE-2025-40281sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rtoLinux
- CVE-2025-40279net: sched: act_connmark: initialize struct tc_ife to fix kernel leakLinux
- CVE-2025-40278net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleakLinux
- CVE-2025-40275ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_baddLinux
- CVE-2025-40268cifs: client: fix memory leak in smb3_fs_context_parse_paramLinux
- CVE-2025-40267io_uring/rw: ensure allocated iovec gets cleared for early failureLinux
- CVE-2025-14139UTT 进取 520W formConfigDnsFilterGlobal strcpy buffer overflowUTT 进取
- CVE-2025-13748Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_idtechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2025-13358Accessiy By CodeConfig Accessibility <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page CreationAccessiy by CodeConfig – Accessibility Widgets for ADA, EAA…
- CVE-2025-13309Accessiy By CodeConfig Accessibility – Easy One-Click Accessibility Toolbar That Truly Matters <= 1.0.2 - Authenticated (Subscriber+) Missing Authorization to Modify Accessibility SettingsAccessiy by CodeConfig – Accessibility Widgets for ADA, EAA…
- CVE-2025-13894CSV Sumotto <= 1.0 - Reflected Cross-Site ScriptingCSV Sumotto
- CVE-2025-12091Search, Filters & Merchandising for WooCommerce <= 3.0.67 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivationinstantsearchplus Search, Filters & Merchandising for WooCo…
- CVE-2025-13857Yet Another WebClap for WordPress <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesksakai Yet Another WebClap for WordPress
- CVE-2025-13856Extra Post Images <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesmichaelcole1991 Extra Post Images
- CVE-2025-13863RevInsite <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeskrupenik RevInsite
- CVE-2025-13907CSS3 Buttons <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributestunilame CSS3 Buttons
- CVE-2025-12717List Attachments Shortcode <= 0.4.1a - Authenticated (Author+) Stored Cross-Site Scripting via list-attachments Shortcodecgrymala List Attachments Shortcode
- CVE-2025-12577Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Listing Updatepassionui Listar – Directory Listing & Classifieds WordPres…
- CVE-2025-12715Canadian Nutrition Facts Label <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nutrition Label Custom Post Typeemaude Canadian Nutrition Facts Label
- CVE-2025-13656Cute News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attributearnabkumar Cute News Ticker
- CVE-2025-13899TR Timthumb <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributespntrinh TR Timthumb
- CVE-2025-13308Application Passwords <= 0.1.3 - Reflected Cross-Site Scripting via reject_urlgeorgestephanis Application Passwords
- CVE-2025-13666Helloprint <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Order Status ModificationPlug your WooCommerce into the largest catalog of customize…
- CVE-2025-13629WP Landing Page <= 0.9.3 - Cross-Site Request Forgery to Arbitrary Post Meta Updatexbenx WP Landing Page
- CVE-2025-12720g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletiongaridium g-FFL Cockpit
- CVE-2025-12574Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletionpassionui Listar – Directory Listing & Classifieds WordPres…
- CVE-2025-12721g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposuregaridium g-FFL Cockpit
- CVE-2025-13896Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attributewpdiscover Social Feed Gallery Portfolio
- CVE-2025-13898Ultra Skype Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_id' Shortcode Attributesozan45 Ultra Skype Button
- CVE-2025-13137Live Sales Notification for Woocommerce – Woomotiv <= 3.6.3 - Reflected Cross-Site Scriptingdelabon Live Sales Notification for Woocommerce – Woomotiv
- CVE-2025-13626myLCO <= 0.8.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']realloc myLCO
- CVE-2025-14117fit2cloud Halo cross-site request forgeryfit2cloud Halo
- CVE-2025-13922Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clausestevejburge Tag, Category, and Taxonomy Manager – AI Autota…
- CVE-2025-12505weDocs <= 2.1.14 - Missing Authorization to Settings Updatewedevs weDocs: AI Powered Knowledge Base, Docs, Documentati…
- CVE-2025-11263Link Whisper Free <= 0.8.8 - Reflected Cross-Site Scriptinglinkwhspr Link Whisper Free