Skip to content
OpenAdvisories

Archive

7 May 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.6
    CVE-2025-47550 Public exploit

    WordPress Instantio plugin <= 3.3.16 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Instantio instantio allows Upload a Web Shell to a Web Server.This issue affects Instantio: from n/a through <= 3.3.16.

  • Medium 6.9
    CVE-2025-27533 Public exploit

    Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation

    Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of …

  • Medium 6.1
    CVE-2025-29602 Public exploit

    flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.

  • Medium 5.8
    CVE-2025-47423 Public exploit Scanner template

    Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ direc…