Skip to content
OpenAdvisories

Archive

22 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /22 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-20156

    Cisco Meeting Management Client-Server Privilege Escalation Vulnerability

    A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vulnerability exists because proper authorization is not enforced u…

    Cisco Cisco Meeting Management Network devices
  • Critical 9.8
    CVE-2025-23914

    WordPress Muzaara Google Ads Report Plugin <= 3.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in muzaara Muzaara Google Ads Report muzaara-adwords-optimize-dashboard allows Object Injection.This issue affects Muzaara Google Ads Report: from n/a through <= 3.1.

    muzaara Muzaara Google Ads Report
  • Critical 10.0
    CVE-2025-23953

    WordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Scriptonite user files user-files allows Upload a Web Shell to a Web Server.This issue affects user files: from n/a through <= 2.4.2.

    Scriptonite user files
  • Critical 9.1
    CVE-2025-23942 Public exploit

    WordPress WP Load Gallery Plugin <= 2.1.6 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in ngocuct0912 WP Load Gallery wp-load-gallery allows Upload a Web Shell to a Web Server.This issue affects WP Load Gallery: from n/a through <= 2.1.6.

    ngocuct0912 WP Load Gallery
  • Critical 9.9
    CVE-2025-23918

    WordPress Smallerik File Browser plugin <= 1.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Enrico Sandoli Smallerik File Browser smallerik-file-browser allows Upload a Web Shell to a Web Server.This issue affects Smallerik File Browser: from n/a through <= 1.1.

    Enrico Sandoli Smallerik File Browser
  • Critical 9.0
    CVE-2025-23921

    WordPress Multi Uploader for Gravity Forms plugin <= 1.1.3 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in sh1zen Multi Uploader for Gravity Forms gf-multi-uploader allows Upload a Web Shell to a Web Server.This issue affects Multi Uploader for Gravity Forms: from n/a through <= 1.1.3.

    sh1zen Multi Uploader for Gravity Forms
  • Critical 9.3
    CVE-2025-23931

    WordPress WordPress Local SEO plugin <= 2.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oliver Fuhrmann WordPress Local SEO dh-local-seo allows Blind SQL Injection.This issue affects WordPress Local SEO: from n/a through <= 2.3.

    Oliver Fuhrmann WordPress Local SEO Web / CMS
  • Critical 9.8
    CVE-2025-23932

    WordPress Quick Count Plugin <= 3.00 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Marko-M Quick Count quick-count allows Object Injection.This issue affects Quick Count: from n/a through <= 3.00.

    Marko-M Quick Count
  • Critical 9.8
    CVE-2024-12857

    AdForest <= 5.1.8 - Authentication Bypass

    The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user's identity prior to logging them in as that user. This makes it possible for unauthent…

    scriptsbundle AdForest Web / CMS
  • Critical 9.8
    CVE-2023-37777

    A SQL injection vulnerability exists in Synnefo Internet Management Software (IMS) version 2023 and earlier. This vulne…