Skip to content
OpenAdvisories

Archive

4 April 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-32118 Public exploit

    WordPress CMP – Coming Soon & Maintenance plugin <= 4.1.14 - Remote Code Execution (RCE) vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in NiteoThemes CMP – Coming Soon & Maintenance cmp-coming-soon-maintenance allows Using Malicious Files.This issue affects CMP – Coming Soon & Maintenance: from n/a through <= 4.1.14.

  • Critical 9.8
    CVE-2025-27520 Public exploit EPSS 41%

    BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows …

  • Medium 6.3
    CVE-2025-3243 Public exploit

    code-projects Patient Record Management System dental_form.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dental_form.php. The manipulation of the argument itr_no/dental_no leads to sql injection. The …

  • High 7.5
    CVE-2025-3194 Public exploit

    bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function

    Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this to crash the application.