2025 CVEs (page 122)
Page 122 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-11890 | High | 7.5 | 2025-11-04 | The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This i… |
CVE-2025-11812 | Medium | 6.4 | 2025-11-04 | The Reuse Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reuse_builder_single_post_title' shortcode in all versions up to… |
CVE-2025-11758 | Medium | 6.5 | 2025-11-04 | The All in One Time Clock Lite plugin for WordPress is vulnerable to unauthorized access due to a missing authorization check in all versions up to, and includ… |
CVE-2025-11753 | Medium | 4.4 | 2025-11-04 | The Bootstrap Multi-language Responsive Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, a… |
CVE-2025-11733 | High | 7.2 | 2025-11-04 | The Footnotes Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 3.0.7 due t… |
CVE-2025-11724 | High | 8.8 | 2025-11-04 | The EM Beer Manager plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in all versions up to, and including, 3.2.3. T… |
CVE-2025-11704 | High | 7.5 | 2025-11-04 | The Elegance Menu plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the 'elegance-menu' attribute of the… |
CVE-2025-10896 | High | 8.8 | 2025-11-04 | Multiple plugins for WordPress with the Jewel Theme Recommended Plugins Library are vulnerable to Unrestricted Upload of File with Dangerous Type via arbitrary… |
CVE-2025-47370 | Medium | 6.5 | 2025-11-04 | Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. |
CVE-2025-47368 | High | 7.8 | 2025-11-04 | Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing. |
CVE-2025-47367 | High | 7.8 | 2025-11-04 | Memory corruption while accessing a buffer during IOCTL processing. |
CVE-2025-47365 | High | 7.8 | 2025-11-04 | Memory corruption while processing large input data from a remote source via a communication interface. |
CVE-2025-47362 | Medium | 6.1 | 2025-11-04 | Information disclosure while processing message from client with invalid payload. |
CVE-2025-47361 | High | 7.8 | 2025-11-04 | Memory corruption when triggering a subsystem crash with an out-of-range identifier. |
CVE-2025-47360 | High | 7.8 | 2025-11-04 | Memory corruption while processing client message during device management. |
CVE-2025-47357 | High | 8.0 | 2025-11-04 | Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions. |
CVE-2025-47353 | High | 7.8 | 2025-11-04 | Memory corruption while processing request sent from GVM. |
CVE-2025-47352 | High | 7.8 | 2025-11-04 | Memory corruption while processing audio streaming operations. |
CVE-2025-27074 | High | 8.8 | 2025-11-04 | Memory corruption while processing a GP command response. |
CVE-2025-27070 | High | 7.8 | 2025-11-04 | Memory corruption while performing encryption and decryption commands. |
CVE-2025-27064 | Medium | 6.1 | 2025-11-04 | Information disclosure while registering commands from clients with diag through diagHal. |
CVE-2025-12401 | Medium | 6.1 | 2025-11-04 | The Label Plugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5. This is due to missing or incorre… |
CVE-2025-12070 | Medium | 4.3 | 2025-11-04 | The ViaAds plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2. This is due to missing nonce validatio… |
CVE-2025-12069 | Medium | 4.3 | 2025-11-04 | The WP Global Screen Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing… |
CVE-2025-11008 | Critical | 9.8 | 2025-11-04 | The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it… |
CVE-2025-11007 | Critical | 9.8 | 2025-11-04 | The CE21 Suite plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the wp_ajax_nopriv_ce21_single_si… |
CVE-2025-12324 | Medium | 6.4 | 2025-11-04 | The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `table` shortcode attributes… |
CVE-2025-11841 | Medium | 6.4 | 2025-11-04 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versi… |
CVE-2025-43507 | Medium | 6.5 | 2025-11-04 | A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, vision… |
CVE-2025-43505 | High | 8.8 | 2025-11-04 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to… |
CVE-2025-43504 | Medium | 4.9 | 2025-11-04 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause… |
CVE-2025-43503 | Medium | 4.3 | 2025-11-04 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 a… |
CVE-2025-43502 | High | 7.5 | 2025-11-04 | A privacy issue was addressed by removing sensitive data. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. An app… |
CVE-2025-43500 | High | 7.5 | 2025-11-04 | A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, wat… |
CVE-2025-43499 | Medium | 5.5 | 2025-11-04 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, ma… |
CVE-2025-43498 | Medium | 5.5 | 2025-11-04 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2… |
CVE-2025-43496 | High | 7.5 | 2025-11-04 | The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS… |
CVE-2025-43495 | Medium | 5.4 | 2025-11-04 | The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to monitor keys… |
CVE-2025-43493 | Medium | 4.3 | 2025-11-04 | The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, vis… |
CVE-2025-43481 | Medium | 5.2 | 2025-11-04 | This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox. |
CVE-2025-43480 | High | 8.1 | 2025-11-04 | The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS… |
CVE-2025-43479 | Medium | 5.5 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may… |
CVE-2025-43478 | Medium | 5.5 | 2025-11-04 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An ap… |
CVE-2025-43477 | Medium | 5.5 | 2025-11-04 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tah… |
CVE-2025-43476 | High | 7.8 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may… |
CVE-2025-43474 | High | 7.8 | 2025-11-04 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app… |
CVE-2025-43472 | High | 7.8 | 2025-11-04 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app m… |
CVE-2025-43469 | Medium | 5.5 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may… |
CVE-2025-43468 | Medium | 5.5 | 2025-11-04 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, mac… |
CVE-2025-43462 | High | 7.5 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26… |
CVE-2025-43460 | Medium | 4.6 | 2025-11-04 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be a… |
CVE-2025-43459 | Medium | 4.6 | 2025-11-04 | An authentication issue was addressed with improved state management. This issue is fixed in watchOS 26.1. An attacker with physical access to a locked Apple W… |
CVE-2025-43458 | Medium | 4.3 | 2025-11-04 | This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS T… |
CVE-2025-43457 | Medium | 6.5 | 2025-11-04 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS… |
CVE-2025-43455 | Medium | 5.5 | 2025-11-04 | A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious… |
CVE-2025-43454 | High | 7.5 | 2025-11-04 | This issue was addressed through improved state management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. A device may persist… |
CVE-2025-43452 | Medium | 4.6 | 2025-11-04 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26.1 and iPadOS 26.1. Keyboard suggestions may display s… |
CVE-2025-43450 | High | 7.5 | 2025-11-04 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to learn in… |
CVE-2025-43449 | High | 7.5 | 2025-11-04 | The issue was addressed with improved handling of caches. This issue is fixed in iOS 26.1 and iPadOS 26.1. A malicious app may be able to track users between i… |
CVE-2025-43448 | Medium | 6.3 | 2025-11-04 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15… |
CVE-2025-43447 | Medium | 5.5 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app m… |
CVE-2025-43446 | Medium | 5.5 | 2025-11-04 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may b… |
CVE-2025-43445 | Medium | 4.3 | 2025-11-04 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoi… |
CVE-2025-43444 | Medium | 5.3 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1… |
CVE-2025-43443 | Medium | 4.3 | 2025-11-04 | This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tv… |
CVE-2025-43442 | Low | 3.3 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be ab… |
CVE-2025-43441 | Medium | 4.3 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe… |
CVE-2025-43440 | Medium | 6.5 | 2025-11-04 | This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchO… |
CVE-2025-43439 | Medium | 5.5 | 2025-11-04 | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app… |
CVE-2025-43438 | Medium | 4.3 | 2025-11-04 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26… |
CVE-2025-43436 | High | 7.5 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, wa… |
CVE-2025-43435 | Medium | 4.3 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe… |
CVE-2025-43434 | Medium | 4.3 | 2025-11-04 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26… |
CVE-2025-43433 | High | 8.8 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe… |
CVE-2025-43432 | Medium | 4.3 | 2025-11-04 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1… |
CVE-2025-43431 | High | 8.8 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe… |
CVE-2025-43430 | Medium | 4.3 | 2025-11-04 | This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS… |
CVE-2025-43429 | Medium | 4.3 | 2025-11-04 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macO… |
CVE-2025-43427 | Medium | 4.3 | 2025-11-04 | This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS… |
CVE-2025-43426 | Medium | 5.5 | 2025-11-04 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. An app may be able to access sen… |
CVE-2025-43425 | Medium | 4.3 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1… |
CVE-2025-43424 | Medium | 6.5 | 2025-11-04 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. A malicious HID device may cause an une… |
CVE-2025-43423 | Low | 2.0 | 2025-11-04 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2… |
CVE-2025-43422 | Medium | 4.6 | 2025-11-04 | The issue was addressed by adding additional logic. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a device may be able t… |
CVE-2025-43421 | Medium | 4.3 | 2025-11-04 | Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS… |
CVE-2025-43420 | Medium | 4.7 | 2025-11-04 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be… |
CVE-2025-43419 | High | 8.8 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26… |
CVE-2025-43414 | Medium | 6.2 | 2025-11-04 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may… |
CVE-2025-43413 | High | 7.5 | 2025-11-04 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2… |
CVE-2025-43412 | Medium | 6.3 | 2025-11-04 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may b… |
CVE-2025-43411 | Medium | 5.5 | 2025-11-04 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be… |
CVE-2025-43409 | Medium | 5.5 | 2025-11-04 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to ac… |
CVE-2025-43408 | Low | 2.4 | 2025-11-04 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1… |
CVE-2025-43407 | High | 7.8 | 2025-11-04 | This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS… |
CVE-2025-43405 | High | 7.5 | 2025-11-04 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An… |
CVE-2025-43401 | High | 7.5 | 2025-11-04 | A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A remote… |
CVE-2025-43399 | High | 7.5 | 2025-11-04 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tah… |
CVE-2025-43398 | Medium | 5.5 | 2025-11-04 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, mac… |
CVE-2025-43397 | Medium | 5.5 | 2025-11-04 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app m… |
CVE-2025-43396 | Medium | 5.5 | 2025-11-04 | A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A sandboxed app may be ab… |