Skip to content
OpenAdvisories

Archive

11 March 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-28915 Public exploit

    WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit themeegg-toolkit allows Upload a Web Shell to a Web Server.This issue affects ThemeEgg ToolKit: from n/a through <= 1.2.9.

  • Critical 10.0
    CVE-2025-24201 Exploited Public exploit

    An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…

    KEV Mar 13, 2025
  • Critical 10.0
    CVE-2024-54085 Exploited Public exploit EPSS 61%

    Redfish Authentication Bypass

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

    KEV Jun 25, 2025
  • Critical 9.8
    CVE-2025-1661 Public exploit Scanner template EPSS 56%

    HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

    The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the woof_text_search AJAX action. This makes it possible for unau…