2025 CVEs (page 380)
Page 380 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-30575 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly Login Redirect login-redirect allows Stored XSS.Th… |
CVE-2025-30574 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jenst Mobile Navigation mobile-navigation allows Stored X… |
CVE-2025-30573 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mrdenny My Default Post Content my-default-post-content a… |
CVE-2025-30572 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in Igor Yavych Simple Rating simple-rating allows Stored XSS.This issue affects Simple Rating: from n/a through… |
CVE-2025-30571 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in STEdb Corp. STEdb Forms stedb-forms allows SQL Injection… |
CVE-2025-30570 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AliRezaMohammadi دکمه، شبکه اجتماعی خرید dokme allows SQL… |
CVE-2025-30569 | High | 8.5 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jahertor WP Featured Entries wp-featured-entries allows S… |
CVE-2025-30568 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in hitoy Super Static Cache super-static-cache allows Cross Site Request Forgery.This issue affects Super Stati… |
CVE-2025-30566 | Medium | 6.5 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aryan Themes Clink clink allows DOM-Based XSS.This issue… |
CVE-2025-30565 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in karrikas banner-manager banner-manager allows Stored XSS.This issue affects banner-manager: from n/a through… |
CVE-2025-30564 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in wpwox Custom Script Integration custom-script-integration allows Stored XSS.This issue affects Custom Script… |
CVE-2025-30561 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in Henrique Mouta CAS Maestro cas-maestro allows Stored XSS.This issue affects CAS Maestro: from n/a through <=… |
CVE-2025-30560 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in Sana Ullah jQuery Dropdown Menu jquery-drop-down-menu-plugin allows Stored XSS.This issue affects jQuery Dro… |
CVE-2025-30558 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from… |
CVE-2025-30557 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in odihost Easy 301 Redirects odihost-easy-redirect-301 allows Cross Site Request Forgery.This issue affects Ea… |
CVE-2025-30556 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in flyaga Fix Rss Feeds fix-rss-feed allows Cross Site Request Forgery.This issue affects Fix Rss Feeds: from n… |
CVE-2025-30555 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in iiiryan WordPres 同步微博 wp2wb allows Stored XSS.This issue affects WordPres 同步微博: from n/a through <= 1.1.0. |
CVE-2025-30553 | Medium | 6.5 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Z.com byGMO GMO Font Agent gmo-font-agent allows Stored X… |
CVE-2025-30552 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in Donald Gilbert WordPress Admin Bar Improved wordpress-admin-bar-improved allows Stored XSS.This issue affect… |
CVE-2025-30551 | Medium | 6.5 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in smartredfox Pretty file links pretty-file-links allows St… |
CVE-2025-30550 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in WPShop.ru CallPhone'r callphoner allows Stored XSS.This issue affects CallPhone'r: from n/a through <= 1.1.1. |
CVE-2025-30549 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in Yummly Yummly Rich Recipes yummly-rich-recipes allows Cross Site Request Forgery.This issue affects Yummly R… |
CVE-2025-30546 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in boroV Cackle cackle allows Cross Site Request Forgery.This issue affects Cackle: from n/a through <= 4.33. |
CVE-2025-30545 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixeline issuuPress issuupress allows Stored XSS.This iss… |
CVE-2025-30543 | Medium | 4.3 | 2025-03-24 | Missing Authorization vulnerability in swayam.tejwani Menu Duplicator copy-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-30542 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in wpsolutions SoundCloud Ultimate soundcloud-ultimate allows Cross Site Request Forgery.This issue affects Sou… |
CVE-2025-30541 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Info Boxes Shortcode and Widget info-boxes-shortcode-and-widget allows Cross Site Request Forgery… |
CVE-2025-30540 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in avaibook AvaiBook avaibook allows Stored XSS.This issue a… |
CVE-2025-30539 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benedikt Mo BMo Expo bmo-expo allows Stored XSS.This issu… |
CVE-2025-30538 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in ChrisHurst Simple Optimizer simple-optimizer allows Cross Site Request Forgery.This issue affects Simple Opt… |
CVE-2025-30537 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristian Sarov Upload Quota per User upload-quota-per-use… |
CVE-2025-30536 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zeitwesentech Beautiful Link Preview beautiful-link-previ… |
CVE-2025-30535 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in muro External image replace external-image-replace allows Cross Site Request Forgery.This issue affects Exte… |
CVE-2025-30534 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in captcha.soft Image Captcha image-captcha allows Cross Site Request Forgery.This issue affects Image Captcha… |
CVE-2025-30533 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Message ticker message-ticker allows Stored XSS… |
CVE-2025-30532 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MorganF Weather Layer weather-layer allows Stored XSS.Thi… |
CVE-2025-30531 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in GBS Developer WP Ride Booking wp-ride-booking allows Cross Site Request Forgery.This issue affects WP Ride B… |
CVE-2025-30530 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atikul AI Preloader ai-preloader allows Stored XSS.This i… |
CVE-2025-30529 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in Sébastien Dumont Auto Load Next Post auto-load-next-post allows Cross Site Request Forgery.This issue affect… |
CVE-2025-30528 | Critical | 9.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through… |
CVE-2025-30527 | Medium | 5.9 | 2025-03-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codetoolbox My Bootstrap Menu my-bootstrap-menu allows St… |
CVE-2025-30526 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in lucksy Typekit plugin for WordPress typekit allows Cross Site Request Forgery.This issue affects Typekit plu… |
CVE-2025-30525 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows SQL I… |
CVE-2025-30523 | High | 7.6 | 2025-03-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marcel-NL Super Simple Subscriptions super-simple-subscri… |
CVE-2025-30522 | High | 7.1 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in Damian Orzol Contact Form 7 Material Design cf7-material-design allows Stored XSS.This issue affects Contact… |
CVE-2025-30521 | Medium | 4.3 | 2025-03-24 | Cross-Site Request Forgery (CSRF) vulnerability in giangmd93 GP Back To Top gp-back-to-top allows Cross Site Request Forgery.This issue affects GP Back To Top… |
CVE-2025-0835 | High | 7.8 | 2025-03-24 | Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. |
CVE-2025-0478 | High | 7.8 | 2025-03-24 | Software installed and run as a non-privileged user may conduct improper GPU system calls to issue reads and writes to arbitrary physical memory pages. Under… |
CVE-2025-2702 | Medium | 6.3 | 2025-03-24 | A vulnerability, which was classified as critical, has been found in Softwin WMX3 3.1. This issue affects the function ImageAdd of the file /ImageAdd.ashx. The… |
CVE-2025-2701 | Medium | 6.3 | 2025-03-24 | A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manag… |
CVE-2025-2700 | Low | 3.5 | 2025-03-24 | A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handl… |
CVE-2025-2699 | Low | 3.5 | 2025-03-24 | A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the c… |
CVE-2025-2690 | Medium | 6.3 | 2025-03-24 | A vulnerability, which was classified as critical, was found in yiisoft Yii2 up to 2.0.39. This affects the function Generate of the file phpunit\src\Framework… |
CVE-2025-2689 | Medium | 6.3 | 2025-03-24 | A vulnerability, which was classified as critical, has been found in yiisoft Yii2 up to 2.0.45. Affected by this issue is the function getIterator of the file… |
CVE-2025-2688 | Medium | 4.3 | 2025-03-24 | A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2025-2687 | Medium | 6.3 | 2025-03-24 | A vulnerability classified as critical has been found in PHPGurukul eLearning System 1.0. Affected is an unknown function of the file /user/index.php of the co… |
CVE-2025-2686 | Medium | 6.5 | 2025-03-24 | A vulnerability has been found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as critical. Affected… |
CVE-2025-1203 | Low | 3.5 | 2025-03-24 | The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privi… |
CVE-2025-1062 | Low | 3.5 | 2025-03-24 | The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privi… |
CVE-2025-2684 | High | 7.3 | 2025-03-24 | A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0. This issue affects some unknown processing o… |
CVE-2025-2683 | High | 7.3 | 2025-03-24 | A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile… |
CVE-2025-2682 | High | 7.3 | 2025-03-24 | A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /edit-subadmin… |
CVE-2025-2681 | High | 7.3 | 2025-03-24 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-2680 | High | 7.3 | 2025-03-24 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-2679 | High | 7.3 | 2025-03-24 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /con… |
CVE-2025-2678 | High | 7.3 | 2025-03-24 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /c… |
CVE-2025-2677 | High | 7.3 | 2025-03-24 | A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-2676 | High | 7.3 | 2025-03-24 | A vulnerability, which was classified as critical, was found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /add-sub… |
CVE-2025-2675 | High | 7.3 | 2025-03-24 | A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2025-2674 | High | 7.3 | 2025-03-24 | A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-2673 | Low | 3.5 | 2025-03-24 | A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /home_empl… |
CVE-2025-2672 | Medium | 6.3 | 2025-03-23 | A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-2671 | Medium | 6.3 | 2025-03-23 | A vulnerability was found in Yue Lao Blind Box 月老盲盒 up to 4.0. It has been declared as critical. This vulnerability affects the function base64image of the fil… |
CVE-2025-2665 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2025-2664 | Medium | 4.7 | 2025-03-23 | A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2025-2663 | High | 7.3 | 2025-03-23 | A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functio… |
CVE-2025-2662 | Medium | 6.3 | 2025-03-23 | A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been classified as critical. Affected is an unknown function of the file st… |
CVE-2025-2661 | High | 7.3 | 2025-03-23 | A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2025-2660 | High | 7.3 | 2025-03-23 | A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2025-2659 | High | 7.3 | 2025-03-23 | A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /stude… |
CVE-2025-2658 | High | 7.3 | 2025-03-23 | A vulnerability, which was classified as critical, has been found in PHPGurukul Online Security Guards Hiring System 1.0. Affected by this issue is some unknow… |
CVE-2025-2657 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functi… |
CVE-2025-2656 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. Th… |
CVE-2025-2655 | High | 7.3 | 2025-03-23 | A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function save_users/delete_users of the file /cla… |
CVE-2025-29806 | Medium | 6.5 | 2025-03-23 | No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2025-29795 | High | 7.8 | 2025-03-23 | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally. |
CVE-2025-2654 | High | 7.3 | 2025-03-23 | A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /ad… |
CVE-2025-2653 | Medium | 4.3 | 2025-03-23 | A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to imprope… |
CVE-2025-30474 | Medium | 5.0 | 2025-03-23 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Commons VFS. The FtpFileObject class can throw an exception when a file is… |
CVE-2025-2691 | High | 8.2 | 2025-03-23 | Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a lo… |
CVE-2025-2652 | Medium | 5.3 | 2025-03-23 | A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerabilit… |
CVE-2025-2651 | Medium | 5.3 | 2025-03-23 | A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/ad… |
CVE-2025-27553 | High | 7.5 | 2025-03-23 | Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' p… |
CVE-2025-2650 | Low | 3.5 | 2025-03-23 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processi… |
CVE-2025-2649 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /c… |
CVE-2025-2648 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/view-enq… |
CVE-2025-2647 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-2646 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-2645 | Low | 3.5 | 2025-03-23 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /… |
CVE-2025-2644 | High | 7.3 | 2025-03-23 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /a… |