2025 CVEs (page 114)
Page 114 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12637 | High | 8.8 | 2025-11-11 | The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the process_theme function in… |
CVE-2025-12632 | Medium | 5.5 | 2025-11-11 | The RandomQuotr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.4 due to insuffi… |
CVE-2025-12631 | Medium | 4.4 | 2025-11-11 | The Squirrels Auto Inventory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.3 d… |
CVE-2025-12590 | Medium | 6.1 | 2025-11-11 | The YSlider plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.1. This is… |
CVE-2025-12589 | Medium | 6.1 | 2025-11-11 | The WP-Walla plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 0.5.3.5. Thi… |
CVE-2025-12588 | Medium | 4.3 | 2025-11-11 | The USB Qr Code Scanner For Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is d… |
CVE-2025-12538 | Medium | 4.4 | 2025-11-11 | The Fleet Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.5.1 due to insuf… |
CVE-2025-12526 | Medium | 4.3 | 2025-11-11 | The Private Google Calendars plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pgc_remove' acti… |
CVE-2025-12132 | Medium | 4.3 | 2025-11-11 | The WP Custom Admin Login Page Logo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.8.4. This is due… |
CVE-2025-12126 | Medium | 5.4 | 2025-11-11 | The The Total Book Project plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0 via several functio… |
CVE-2025-12021 | Medium | 6.1 | 2025-11-11 | The WP-OAuth plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'error_description' parameter in all versions up to, and including, 0… |
CVE-2025-12020 | Medium | 4.9 | 2025-11-11 | The Double the Donation – A workplace giving tool to help your fundraising efforts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin… |
CVE-2025-12019 | Medium | 4.4 | 2025-11-11 | The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insuff… |
CVE-2025-12010 | Medium | 6.5 | 2025-11-11 | The Authors List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.6.1 via the via arbitrary metho… |
CVE-2025-11999 | Medium | 5.3 | 2025-11-11 | The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capability check on the addmultiplemarker_r… |
CVE-2025-11997 | Medium | 5.3 | 2025-11-11 | The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1… |
CVE-2025-11996 | Medium | 5.3 | 2025-11-11 | The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fui_delete_image() and fui_dele… |
CVE-2025-11988 | Medium | 5.3 | 2025-11-11 | The Crypto plugin for WordPress is vulnerable to unauthorized manipulation of data in all versions up to, and including, 2.22. This is due to the plugin regist… |
CVE-2025-11986 | Medium | 5.3 | 2025-11-11 | The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unau… |
CVE-2025-11894 | Medium | 5.3 | 2025-11-11 | The Shelf Planner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several REST API endpoints in al… |
CVE-2025-11891 | Medium | 5.3 | 2025-11-11 | The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log… |
CVE-2025-11886 | Medium | 4.3 | 2025-11-11 | The CTL Arcade Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incor… |
CVE-2025-11882 | Medium | 6.4 | 2025-11-11 | The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to… |
CVE-2025-11874 | Medium | 5.4 | 2025-11-11 | The Slippy Slider – Responsive Touch Navigation Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slippy-slider' short… |
CVE-2025-11873 | Medium | 6.4 | 2025-11-11 | The WP BBCode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' shortcode in all versions up to, and including, 1.8.1 du… |
CVE-2025-11869 | Medium | 6.4 | 2025-11-11 | The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `wrap_id` shortcode attribute in all versions up to, and includin… |
CVE-2025-11863 | Medium | 6.4 | 2025-11-11 | The My Geo Posts Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mygeo_city' shortcode in all versions up to, and including, 1… |
CVE-2025-11860 | Medium | 6.4 | 2025-11-11 | The Twitter Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ottwitter_feed' shortcode in all versions up to, and including, 1.3… |
CVE-2025-11859 | Medium | 6.4 | 2025-11-11 | The Paypal Donation Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paypal' shortcode in all versions up to, and including… |
CVE-2025-11856 | Medium | 6.4 | 2025-11-11 | The Eventbee Ticketing Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eventbeeticketwidget' shortcode in all versions up to… |
CVE-2025-11829 | Medium | 6.4 | 2025-11-11 | The Five9 Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'toolbar' attribute of the [five9-chat] shortcode in all versions… |
CVE-2025-11828 | Medium | 6.4 | 2025-11-11 | The Magazine Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headerHtmlTag' attribute in the bnm-blocks/featured-posts-1 b… |
CVE-2025-11822 | Medium | 6.4 | 2025-11-11 | The WP Bootstrap Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bootstrap_tab' shortcode in all versions up to, and including… |
CVE-2025-11821 | Medium | 6.4 | 2025-11-11 | The Woocommerce – Products By Custom Tax plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'woo_products_custom_tax' shortcode in all v… |
CVE-2025-11805 | Medium | 6.4 | 2025-11-11 | The Skip to Timestamp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'skipto' shortcode in all versions up to, and including, 1.4.4… |
CVE-2025-11532 | Medium | 5.3 | 2025-11-11 | The Wisly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.0 due to missing validation on the '… |
CVE-2025-11521 | High | 8.1 | 2025-11-11 | The Astra Security Suite – Firewall & Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs f… |
CVE-2025-11457 | Critical | 9.8 | 2025-11-11 | The EasyCommerce – AI-Powered, Fast & Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 t… |
CVE-2025-11451 | High | 7.5 | 2025-11-11 | The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5… |
CVE-2025-11170 | Critical | 9.8 | 2025-11-11 | The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import… |
CVE-2025-11168 | High | 8.8 | 2025-11-11 | The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5. This is due to plugin not properly ha… |
CVE-2025-11129 | Medium | 6.4 | 2025-11-11 | The Include Fussball.de Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api' and 'type' parameters in all versions up to, an… |
CVE-2025-42940 | High | 7.5 | 2025-11-11 | SAP CommonCryptoLib does not perform necessary boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network. This may result in… |
CVE-2025-42924 | Medium | 6.1 | 2025-11-11 | SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page… |
CVE-2025-42919 | Medium | 5.3 | 2025-11-11 | Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An una… |
CVE-2025-42899 | Medium | 4.3 | 2025-11-11 | SAP S4CORE (Manage journal entries) does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges. This has l… |
CVE-2025-42897 | Medium | 5.3 | 2025-11-11 | Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unaut… |
CVE-2025-42895 | Medium | 6.9 | 2025-11-11 | Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted par… |
CVE-2025-42894 | Medium | 6.8 | 2025-11-11 | Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrit… |
CVE-2025-42893 | Medium | 6.1 | 2025-11-11 | Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirec… |
CVE-2025-42892 | Medium | 6.8 | 2025-11-11 | Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could… |
CVE-2025-42890 | Critical | 10.0 | 2025-11-11 | SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the pos… |
CVE-2025-42889 | Medium | 5.4 | 2025-11-11 | SAP Starter Solution allows an authenticated attacker to execute crafted database queries, thereby exposing the back-end database. As a result, this vulnerabil… |
CVE-2025-42888 | Medium | 5.5 | 2025-11-11 | SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtim… |
CVE-2025-42887 | Critical | 9.9 | 2025-11-11 | Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module… |
CVE-2025-42886 | Medium | 6.1 | 2025-11-11 | Due to a Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it… |
CVE-2025-42885 | Medium | 5.8 | 2025-11-11 | Due to missing authentication, SAP HANA 2.0 (hdbrss) allows an unauthenticated attacker to call a remote-enabled function that will enable them to view informa… |
CVE-2025-42884 | Medium | 6.5 | 2025-11-11 | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enab… |
CVE-2025-42883 | Low | 2.7 | 2025-11-11 | Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges… |
CVE-2025-42882 | Medium | 4.3 | 2025-11-11 | Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific fun… |
CVE-2025-31719 | Medium | 5.1 | 2025-11-11 | In TEE EcDSA algorithm, there is a possible memory consistency issue. This could lead to generated incorrect signature results with low probability. |
CVE-2025-64529 | Medium | 6.5 | 2025-11-10 | SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions prior to 1.45.2, users who use the e… |
CVE-2025-64522 | Critical | 9.1 | 2025-11-10 | Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validated, allowin… |
CVE-2025-64519 | High | 8.8 | 2025-11-10 | TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In versions up to and including 2.8.8, an authenticated SQL injection v… |
CVE-2025-63678 | High | 7.2 | 2025-11-10 | An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Adminis… |
CVE-2025-11892 | Critical | 9.6 | 2025-11-10 | An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label… |
CVE-2025-11578 | High | 7.2 | 2025-11-10 | A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the a… |
CVE-2025-64518 | High | 7.5 | 2025-11-10 | The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in ve… |
CVE-2025-64513 | | 2025-11-10 | Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4… | |
CVE-2025-64512 | High | 8.6 | 2025-11-10 | Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version 20251107, pdfminer… |
CVE-2025-64509 | High | 7.5 | 2025-11-10 | Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.6, a specially crafted Brotli-compressed envelope can cause Bugsink to spend excessive C… |
CVE-2025-64508 | High | 7.5 | 2025-11-10 | Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.5, brotli "bombs" (highly compressed brotli streams, such as many zeros) can be sent to… |
CVE-2025-64507 | High | 7.8 | 2025-11-10 | Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unpri… |
CVE-2025-64504 | Medium | 5.0 | 2025-11-10 | Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project… |
CVE-2025-64502 | | 2025-11-10 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB `explain()` method provides detailed inform… | |
CVE-2025-64501 | High | 7.6 | 2025-11-10 | ProsemirrorToHtml is a JSON converter which takes ProseMirror-compatible JSON and outputs HTML. In versions 0.2.0 and below, the `prosemirror_to_html` gem is v… |
CVE-2025-64484 | High | 8.5 | 2025-11-10 | OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load… |
CVE-2025-64183 | High | 7.5 | 2025-11-10 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3… |
CVE-2025-64182 | High | 7.8 | 2025-11-10 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3… |
CVE-2025-64181 | High | 7.5 | 2025-11-10 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3… |
CVE-2025-64167 | High | 7.1 | 2025-11-10 | Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to a cross-site scripting attack (leading to JS execu… |
CVE-2025-63397 | Medium | 6.5 | 2025-11-10 | Improper input validation in OneFlow v0.9.0 allows attackers to cause a segmentation fault via adding a Python sequence to the native code during broadcasting/… |
CVE-2025-62780 | Low | 3.5 | 2025-11-10 | changedetection.io is a free open source web page change detection tool. A Stored Cross Site Scripting is present in changedetection.io Watch update API in ver… |
CVE-2025-49145 | High | 8.7 | 2025-11-10 | Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, a user that has enough rights to create webhooks (mostly adminis… |
CVE-2025-63617 | Medium | 6.5 | 2025-11-10 | ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deseriali… |
CVE-2025-63296 | Medium | 6.5 | 2025-11-10 | KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin… |
CVE-2025-48878 | Medium | 4.3 | 2025-11-10 | Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user (e.g. w… |
CVE-2025-48065 | High | 8.8 | 2025-11-10 | Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a field with an error co… |
CVE-2025-48055 | High | 8.5 | 2025-11-10 | Combodo iTop is a web based IT service management tool. In versions prior to 3.2.2, when displaying content in a browse brick in the user portal, a cross-site… |
CVE-2025-63384 | Medium | 6.5 | 2025-11-10 | A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET (Supervisor-mode Exception Return) instruction fails to corr… |
CVE-2025-63149 | High | 7.5 | 2025-11-10 | Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function. This vulnerability allo… |
CVE-2025-60876 | Medium | 6.5 | 2025-11-10 | BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be sp… |
CVE-2025-56503 | Medium | 6.5 | 2025-11-10 | An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replaci… |
CVE-2025-47932 | High | 8.8 | 2025-11-10 | Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is rendered… |
CVE-2025-33150 | Medium | 5.3 | 2025-11-10 | IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages. |
CVE-2025-12729 | Medium | 4.2 | 2025-11-10 | Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2025-12728 | Medium | 4.2 | 2025-11-10 | Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2025-12727 | High | 8.8 | 2025-11-10 | Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2025-12726 | High | 7.5 | 2025-11-10 | Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to… |
CVE-2025-12725 | High | 8.8 | 2025-11-10 | Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a craft… |