Skip to content
OpenAdvisories

Archive

17 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /17 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.1
    CVE-2025-24752 Public exploit

    WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Reflected XSS.This issue affects Essential Addons for Elementor: from n…

    WPDeveloper Essential Addons for Elementor
  • Critical 9.9
    CVE-2025-32583 Public exploit EPSS 20%

    WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in termel PDF 2 Post pdf2post allows Remote Code Inclusion.This issue affects PDF 2 Post: from n/a through <= 2.4.0.

    termel PDF 2 Post
  • Critical 9.9
    CVE-2025-32682 Public exploit

    WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through <= 8.6.4.

    RomanCode MapSVG
  • Critical 9.8
    CVE-2025-39596 Public exploit

    WordPress Quentn WP plugin <= 1.2.8 - Privilege Escalation Vulnerability

    Weak Authentication vulnerability in Quentn.com GmbH Quentn WP quentn-wp allows Privilege Escalation.This issue affects Quentn WP: from n/a through <= 1.2.8.

    Quentn.com Quentn WP
  • Critical 9.1
    CVE-2025-39436 Public exploit

    WordPress I Draw <= 1.0 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in aidraw I Draw idraw allows Using Malicious Files.This issue affects I Draw: from n/a through <= 1.0.

    aidraw I Draw
  • High 8.4
    CVE-2024-55211 Public exploit

    An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.

  • Critical 9.8
    CVE-2024-53924 Public exploit

    Pycel allows code injection via a crafted formula

    Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__('os').system( substring.

    pycel PyPI
  • Critical 9.8
    CVE-2025-28009 Public exploit

    A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.…

  • Medium 6.1
    CVE-2025-29015 Public exploit

    Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/p…

  • Medium 6.3
    CVE-2025-29722 Public exploit

    A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authentica…