Skip to content
OpenAdvisories

Archive

1 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /1 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-1564

    SetSail Membership <= 1.0.3 - Authentication Bypass via Account Takeover

    The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social login. This makes it possible for unauthenticated attackers to log i…

    Select-Themes SetSail Membership Web / CMS
  • Critical 9.8
    CVE-2025-1638

    Alloggio Membership <= 1.1 - Authentication Bypass via Social Login Account Takeover

    The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity through the alloggio_membership_init_rest_api_facebook_login a…

    Edge-Themes Alloggio Membership Web / CMS
  • Critical 9.8
    CVE-2025-1671

    Academist Membership <= 1.1.6 - Authentication Bypass via Account Takeover

    The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_membership_check_facebook_user() function not properly verifying a user's identity prior to authentic…

    Elated-Themes Academist Membership Web / CMS
  • Critical 9.8
    CVE-2024-12824 Scanner template

    Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

    The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their det…

    scriptsbundle Nokri – Job Board WordPress Theme Web / CMS
  • Critical 9.6
    CVE-2025-23116

    An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow …

    Ubiquiti UniFi Protect Application Network devices
  • Critical 9.0
    CVE-2025-23115

    A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor …

    Ubiquiti UniFi Protect Cameras Network devices
  • Critical 9.9
    CVE-2025-27554

    ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to exe…

    ToDesktop ToDesktop