Skip to content
OpenAdvisories

Archive

7 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /7 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-5838

    PHPGurukul Employee Record Management System adminprofile.php sql injection

    A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3. Affected by this vulnerability is an unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injec…

    PHPGurukul Employee Record Management System
  • Medium 6.3
    CVE-2025-5837

    PHPGurukul Employee Record Management System allemployees.php sql injection

    A vulnerability classified as critical has been found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file /admin/allemployees.php. The manipulation of the argument delid leads to sql injection. It is possible to la…

    PHPGurukul Employee Record Management System
  • Medium 6.3
    CVE-2025-5836

    Tenda AC9 POST Request SetIPTVCfg formSetIptv command injection

    A vulnerability was found in Tenda AC9 15.03.02.13. It has been rated as critical. This issue affects the function formSetIptv of the file /goform/SetIPTVCfg of the component POST Request Handler. The manipulation of the argument list leads to command injecti…

    Tenda AC9
  • Medium 6.4
    CVE-2024-9993

    Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget

    The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eael_event_details_text parameter of Event Calendar Widget in all versions up …

    wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets Web / CMS
  • Medium 6.1
    CVE-2025-5528

    Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter

    The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon_share parameter in all versions up to, and including, 3.3.75 due to insufficient input sanitization and output escapin…

    heateor Social Sharing Plugin – Sassy Social Share Web / CMS
  • Medium 6.4
    CVE-2025-5568

    WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

    MagePeople Team Event Booking Manager for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2024-9994

    Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

    The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eael_pricing_item_tooltip_content parameter of the Pricing Table Widget in all…

    wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets Web / CMS
  • Medium 5.3
    CVE-2025-5814

    Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration

    The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsd_plugin_control() function in all versions up to, and including, 1.0.0. This makes it possible for un…

    switcorp Profiler – What Slowing Down Your WP Web / CMS