Skip to content
OpenAdvisories

Archive

25 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /25 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-25574

    JupyterHub's LTI13Authenticator: JWT signature not validated

    `jupyterhub-ltiauthenticator` is a JupyterHub authenticator for learning tools interoperability (LTI). LTI13Authenticator that was introduced in `jupyterhub-ltiauthenticator` 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authentic…

    jupyterhub ltiauthenticator jupyterhub-ltiauthenticator PyPI
  • Critical 9.3
    CVE-2025-26974

    WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore Locator: from n/a through <= 2.5.1.

    WPExperts.io WP Multistore Locator
  • Critical 9.8
    CVE-2025-26966

    WordPress PrivateContent plugin <= 8.11.5 - Unauthenticated Account Takeover vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Aldo Latino PrivateContent private-content.This issue affects PrivateContent: from n/a through <= 8.11.5.

    Aldo Latino PrivateContent
  • Critical 9.3
    CVE-2025-26943

    WordPress Easy Quotes plugin <= 1.2.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Blind SQL Injection.This issue affects Easy Quotes: from n/a through <= 1.2.2.

    Jürgen Müller Easy Quotes
  • Critical 9.8
    CVE-2025-26900

    WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through <= 3.14.27.

    flexmls Flexmls® IDX
  • Critical 9.8
    CVE-2025-1128 EPSS 42%

    Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion

    The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file upload, read, and deletion due to missing file type and path validation in the 'format' method of the EVF_For…

    WPEverest Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Web / CMS
  • Critical 9.8
    CVE-2025-25517

    Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php.

  • Critical 9.8
    CVE-2025-25520

    Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php.

  • Critical 9.8
    CVE-2025-25516

    Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php.

  • Critical 9.8
    CVE-2025-25519

    Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php.

  • Critical 9.8
    CVE-2025-25521

    Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php.