Skip to content
OpenAdvisories

Archive

26 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /26 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-13812

    Anps Theme plugin <= 1.1.1 - Unauthenticated Arbitrary Shortcode Execution

    The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running d…

    Anps Anps Theme plugin Web / CMS
  • Medium 5.7
    CVE-2025-2811

    GL.iNet GL-A1300 Slate Plus API redos

    A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT30…

    GL.iNet GL-MT3000 Beryl AX GL-B3000 Marble GL-AR300M16 Shadow
  • Medium 4.3
    CVE-2025-3915

    Aeropage Sync for Airtable <= 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

    The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attacke…

    aeropage Aeropage Sync for Airtable Web / CMS
  • Medium 6.4
    CVE-2025-1458

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to,…

    bdthemes Element Pack – Widgets, Templates & Addons for Elementor Web / CMS
  • Medium 6.4
    CVE-2024-53636

    An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1…

    Serosoft Academia Student Information System
  • Medium 6.1
    CVE-2025-46652

    In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archi…

    IZArc IZArc
  • Medium 4.9
    CVE-2025-46654

    CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can b…

    HackMD CodiMD
  • Medium 4.9
    CVE-2025-46655

    CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScr…

    HackMD CodiMD
  • Medium 4.5
    CVE-2025-46646

    In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this iss…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine