Skip to content
OpenAdvisories

Archive

21 February 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2019-8900 Public exploit EPSS 70%

    A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute…

  • Medium 6.4
    CVE-2025-1489 Public exploit

    WP-Appbox <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via appbox Shortcode

    The WP-Appbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's appbox shortcode in all versions up to, and including, 4.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…