Skip to content
OpenAdvisories

Archive

5 June 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-5701 Public exploit Scanner template

    HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update

    The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hc_request_handler function in all versions up to, and including, 1.2.2. This makes it pos…

  • High 8.8
    CVE-2025-3054 Public exploit

    WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Upload

    The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subs…