Skip to content
OpenAdvisories

Archive

4 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /4 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-6782 Public exploit

    GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()

    The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient p…

    optinlyhq GoZen Forms Web / CMS
  • High 7.5
    CVE-2025-6783 Public exploit

    GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()

    The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati…

    optinlyhq GoZen Forms Web / CMS
  • High 7.2
    CVE-2025-6586 Public exploit

    Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload

    The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dpwap_plugin_locInstall function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with …

    Metagauss Download Plugin Web / CMS