Skip to content
OpenAdvisories

Archive

May 2025

Vulnerabilities first published in this month (UTC), newest first.

← April 2025 2025 / May June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

1,693 results · Clear filters · Feed

  • Medium 5.0
    CVE-2025-47560

    WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through < 8.6.13.

    RomanCode MapSVG
  • Medium 6.5
    CVE-2025-47557

    WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue affects MapSVG: from n/a through <= 8.5.31.

    RomanCode MapSVG
  • Medium 5.3
    CVE-2025-47563

    WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability

    Missing Authorization vulnerability in villatheme CURCY woocommerce-multi-currency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CURCY: from n/a through <= 2.3.7.

    villatheme CURCY
  • Medium 5.3
    CVE-2025-47562

    WordPress MapSVG plugin <= 8.5.34 - Content Injection Vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a through <= 8.5.34.

    RomanCode MapSVG
  • Medium 5.3
    CVE-2025-47564

    WordPress EventON plugin <= 4.9.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ashanjay EventON eventon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects EventON: from n/a through <= 4.9.8.

    Ashan Jay EventON
  • Medium 4.3
    CVE-2025-48138

    WordPress BERTHA AI plugin <= 1.13 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through <= 1.13.

    Bertha AI – Andrew Palmer BERTHA AI
  • Medium 6.5
    CVE-2025-48135

    WordPress Aptivada for WP plugin <= 2.0.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aptivadadev Aptivada for WP aptivada-for-wp allows DOM-Based XSS.This issue affects Aptivada for WP: from n/a through <= 2.0.0.

    aptivadadev Aptivada for WP
  • Medium 6.5
    CVE-2025-48132

    WordPress X Addons for Elementor plugin <= 1.0.16 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Stored XSS.This issue affects X Addons for Elementor: from n/a through <= 1.0.16.

    pencilwp X Addons for Elementor
  • Medium 6.5
    CVE-2025-48131

    WordPress UltraAddons Elementor Lite plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows Stored XSS.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2.

    Saiful Islam UltraAddons Elementor Lite
  • Medium 4.3
    CVE-2025-48128

    WordPress Sharespine Woocommerce Connector plugin <= 4.7.55 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Sharespine Sharespine Woocommerce Connector sharespine-woocommerce-connector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharespine Woocommerce Connector: from n/a through <…

    Sharespine Sharespine Woocommerce Connector Web / CMS
  • Medium 6.5
    CVE-2025-48127

    WordPress Push notification for Mobile and Web app plugin <= 2.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in App Cheap Push notification for Mobile and Web app push-notification-mobile-and-web-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push notification for Mobile and Web app:…

    App Cheap Push notification for Mobile and Web app
  • Medium 5.3
    CVE-2025-48120

    WordPress MapSVG Lite plugin <= 8.6.9 - Arbitrary Shortcode Execution vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through <= 8.6.9.

    RomanCode MapSVG
  • Medium 6.5
    CVE-2025-48121

    WordPress WP Notes Widget plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steve Puddick WP Notes Widget wp-notes-widget allows DOM-Based XSS.This issue affects WP Notes Widget: from n/a through <= 1.0.6.

    Steve Puddick WP Notes Widget
  • Medium 5.3
    CVE-2025-48119

    WordPress RS WP Book Showcase plugin <= 6.7.59 - Content Injection vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows Code Injection.This issue affects RS WP Book Showcase: from n/a through <= 6.7.59.

    RS WP THEMES RS WP Book Showcase
  • Medium 5.3
    CVE-2025-48117

    WordPress WooCommerce POS plugin <= 1.7.8 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in kilbot WooCommerce POS woocommerce-pos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce POS: from n/a through <= 1.7.8.

    kilbot WooCommerce POS Web / CMS
  • Medium 5.3
    CVE-2025-48116

    WordPress EventON plugin <= 2.4.4 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Ashan Perera EventON eventon-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects EventON: from n/a through <= 2.4.4.

    Ashan Perera EventON
  • Medium 4.3
    CVE-2025-48115

    WordPress ValidateCertify plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Javier Revilla ValidateCertify validar-certificados-de-cursos allows Cross Site Request Forgery.This issue affects ValidateCertify: from n/a through <= 1.6.4.

    Javier Revilla ValidateCertify
  • Medium 6.5
    CVE-2025-48113

    WordPress Broadstreet plugin <= 1.51.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.51.2.

    Broadstreet Broadstreet Ads
  • Medium 4.3
    CVE-2025-48079

    WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid : from n/a through <= 5.9.5.1.

    Metagauss ProfileGrid
  • Medium 6.5
    CVE-2025-48080

    WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through <= 3…

    Uncanny Owl Uncanny Toolkit for LearnDash
  • Medium 6.3
    CVE-2025-4786

    SourceCodester/oretnom23 Stock Management System view_return sql injection

    A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/?page=return/view_return. The manipulation of the argument ID leads to sql injectio…

    SourceCodester oretnom23 Stock Management System Stock Management System
  • Medium 4.3
    CVE-2025-47793

    Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file

    Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. In Nextcloud Server prior to 30.0.2, 29.0.9, and 28.0.1, Nextcloud Enterprise Server prior to …

    Nextcloud security-advisories
  • Medium 6.3
    CVE-2025-4782

    SourceCodester/oretnom23 Stock Management System view_receiving sql injection

    A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/view_receiving&id=1. The manipulation of the argument ID leads to…

    SourceCodester oretnom23 Stock Management System Stock Management System
  • Medium 6.3
    CVE-2025-4781

    PHPGurukul Park Ticketing Management System forgot-password.php sql injection

    A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0. Affected is an unknown function of the file /forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. It is possible…

    PHPGurukul Park Ticketing Management System
  • Medium 6.5
    CVE-2025-4478

    Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service

    A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the service to crash and remain defunct, resulting in a denial of service. It occurs pre-boot and is li…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu
  • Medium 5.0
    CVE-2025-47792

    Nextcloud Desktop 3rdparty applications can create share links via socket API

    Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easil…

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu
  • Medium 4.3
    CVE-2025-47791

    Nextcloud Server's test remote endpoint is not rate limited

    Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 28.0.13, 29.0.10, and 30.0.3 and Nextcloud Enterprise Server prior to 28.0.13, 29.0.10, and 30.0.3, a currently unused endpoint to verify a share recipient was not protected…

    Nextcloud security-advisories
  • Medium 6.4
    CVE-2025-47790

    Nextcloud Server doesn't request second factor after session timeout

    Nextcloud Server is a self hosted personal cloud system. Nextcloud Server prior to 29.0.15, 30.0.9, and 31.0.3 and Nextcloud Enterprise Server prior to 26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9, and 31.0.3 have a bug with session handling. The bug ca…

    Nextcloud security-advisories
  • Medium 6.3
    CVE-2025-4780

    PHPGurukul Park Ticketing Management System foreigner-search.php sql injection

    A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /foreigner-search.php. The manipulation of the argument searchdata leads to sql injection. The …

    PHPGurukul Park Ticketing Management System
  • Medium 4.3
    CVE-2025-32962

    Flask-AppBuilder open redirect vulnerability using HTTP host injection

    Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. Flask-AppBuilder 4.6.2 intr…

    dpgaspar Flask-AppBuilder airflow-3 airflow Wolfi PyPI
  • Medium 6.3
    CVE-2025-4778

    PHPGurukul Park Ticketing Management System normal-search.php sql injection

    A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /normal-search.php. The manipulation of the argument searchdata leads to sql injection. The att…

    PHPGurukul Park Ticketing Management System
  • Medium 5.3
    CVE-2025-40907

    FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

    FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nam…

    ether FCGI libfcgi-perl libfcgi-perl Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2025-4777

    PHPGurukul Park Ticketing Management System view-foreigner-ticket.php sql injection

    A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This affects an unknown part of the file /view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possib…

    PHPGurukul Park Ticketing Management System
  • Medium 5.9
    CVE-2025-2306

    Improper Access Control vulnerability in LIVE CONTRACT

    An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sensitive documents without authentication, if the URL is known. The attack requires the attacker to know the documents UUI…

    SYNCPILOT LIVE CONTRACT
  • Medium 5.1
    CVE-2025-40630 Scanner template

    Open redirection vulnerability in IceWarp Mail Server

    Open redirection vulnerability in IceWarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to redirect a user to any domain by sending a malicious URL to the victim, for example “ https://icewarp.domain.com//<MALICIOUS_DOMAIN>/%2e%2…

    IceWarp Icewarp Mail Server
  • Medium 6.3
    CVE-2025-4770

    PHPGurukul Park Ticketing Management System view-normal-ticket.php sql injection

    A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. This issue affects some unknown processing of the file /view-normal-ticket.php. The manipulation of the argument viewid leads to sql injectio…

    PHPGurukul Park Ticketing Management System
  • Medium 6.3
    CVE-2025-4768

    feng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload

    A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is …

    feng_ha_ha megagao production_ssm ssm-erp
  • Medium 5.3
    CVE-2025-4767

    defog-ai introspect Test Endpoint integration_routes.py test_custom_tool code injection

    A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function test_custom_tool of the file introspect/backend/integration_routes.py of the component Test Endpoint. The manipulation of the a…

    defog-ai introspect
  • Medium 6.5
    CVE-2025-4679 Public exploit

    A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive i…

    Synology Active Backup for Microsoft 365
  • Medium 5.3
    CVE-2025-4756

    D-Link DI-7003GV2 restart.asp denial of service

    A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been declared as problematic. This vulnerability affects unknown code of the file /H5/restart.asp. The manipulation leads to denial of service. The attack can be initiated remotely. Th…

    D-Link DI-7003GV2 Network devices