Skip to content
OpenAdvisories

Archive

10 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /10 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.0
    CVE-2025-32395 Public exploit Scanner template

    Vite has an `server.fs.deny` bypass with an invalid `request-target`

    Vite is a frontend tooling framework for javascript. Prior to 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13, the contents of arbitrary files can be returned to the browser if the dev server is running on Node or Bun. HTTP 1.1 spec (RFC 9112) does not allow # in re…

    vitejs vite vite npm
  • Medium 5.3
    CVE-2025-32259 Public exploit

    WordPress WP ULike plugin <= 4.7.9.1 - Content Spoofing Vulnerability

    Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through <= 4.7.9.1.

    alimir WP ULike
  • Critical 9.1
    CVE-2025-32206 Public exploit

    WordPress Processing Projects Plugin <= 1.0.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects processing-projects allows Upload a Web Shell to a Web Server.This issue affects Processing Projects: from n/a through <= 1.0.2.

    LABCAT Processing Projects
  • Critical 9.9
    CVE-2025-32140 Public exploit

    WordPress WP Remote Thumbnail Plugin <= 1.3.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Nirmal Kumar Ram WP Remote Thumbnail wp-remote-thumbnail allows Upload a Web Shell to a Web Server.This issue affects WP Remote Thumbnail: from n/a through <= 1.3.2.

    Nirmal Kumar Ram WP Remote Thumbnail
  • High 8.1
    CVE-2025-3102 Public exploit Scanner template EPSS 76%

    SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

    The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in all v…

    Brainstorm Force OttoKit: All-in-One Automation Platform Web / CMS
  • High 8.8
    CVE-2025-29017 Public exploit

    A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upl…