Skip to content
OpenAdvisories

Archive

29 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /29 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-11180

    ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer Widget ekit_countdown_timer_title parameter in all versions up to, and including, 3.4.7 due to insufficient input sanitization and outpu…

    roxnor ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor Web / CMS
  • Medium 6.5
    CVE-2024-13557

    Shortcodes by United Themes <= 5.1.6 - Unauthenticated Arbitrary Shortcode Execution

    The Shortcodes by United Themes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before run…

    United Themes Shortcodes by United Themes Web / CMS
  • Medium 5.3
    CVE-2025-2840

    DAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposure

    The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to …

    bhuvnesh DAP to Autoresponders Email Syncing Web / CMS
  • Medium 6.3
    CVE-2025-1217

    Header parser of http stream wrapper does not handle folded headers

    In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the re…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine
  • Medium —
    GHSA-p799-q2pr-6mxj

    go.rgst.io/stencil/v2 vulnerable to Path Traversal

    ### Impact The library used to extract archives (github.com/jaredallard/archives) was vulnerable to the "zip slip" vulnerability. This is used to extract native extension archives and repository source archives. A native extension or repository archive could …

    go.rgst.io/stencil go.rgst.io/stencil/v2 Go