Skip to content
OpenAdvisories

Archive

7 May 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.7
    CVE-2025-31644 Public exploit EPSS 24%

    Appliance mode BIG-IP iControl REST and tmsh vulnerability

    When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A …

  • High 8.1
    CVE-2025-47533 Public exploit

    WordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Iqonic Design Graphina graphina-elementor-charts-and-graphs allows PHP Local File Inclusion.This issue affects Graphina: from n/a through <= 3.0.4.

  • High 7.5
    CVE-2025-29448 Public exploit

    Easy!Appointments Denial of Service (DoS)

    Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.