Skip to content
OpenAdvisories

Archive

7 February 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2025-25163 Public exploit

    WordPress Plugin A/B Image Optimizer Plugin <= 3.3 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Zach Swetz Plugin A/B Image Optimizer images-optimizer allows Path Traversal.This issue affects Plugin A/B Image Optimizer: from n/a through <= 3.3.

  • Critical 9.6
    CVE-2025-25101 Public exploit

    WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in MetricThemes Munk Sites munk-sites allows Cross Site Request Forgery.This issue affects Munk Sites: from n/a through <= 1.0.7.

  • Critical 9.8
    CVE-2024-55215 Public exploit

    An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization inte…

  • Medium 4.6
    CVE-2024-35106 Public exploit

    NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability al…