Skip to content
OpenAdvisories

Archive

20 May 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-40634 Public exploit

    Stack-based buffer overflow in TP-Link Archer AX50

    Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the devi…

  • Critical 9.8
    CVE-2025-4322 Public exploit Scanner template EPSS 15%

    Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

    The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible…