Skip to content
OpenAdvisories

Archive

21 May 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-4524 Public exploit Scanner template EPSS 11%

    Madara – Responsive and modern WordPress theme for manga sites <= 2.2.2 - Unauthenticated Local File Inclusion

    The Madara – Responsive and modern WordPress theme for manga sites theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.2 via the 'template' parameter. This makes it possible for unauthenticated attackers to incl…

  • Critical 9.8
    CVE-2025-4094 Public exploit EPSS 17%

    Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

    The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.

  • Critical 9.1
    CVE-2025-27558 Public exploit

    IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. In mesh networks using Wi-Fi Protected A…