Skip to content
OpenAdvisories

Archive

9 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /9 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-53546 Public exploit

    Folo allows secrets exfiltration via `pull_request_target`

    Folo organizes feeds content into one timeline. Using pull_request_target on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploitin…

    RSSNext Folo
  • Critical 9.6
    CVE-2025-6514 Public exploit EPSS 77%

    OS command injection in mcp-remote when connecting to untrusted MCP servers

    mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

    mcp-remote npm
  • Critical 9.8
    CVE-2025-4606 Public exploit

    Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover

    The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their de…

    uxper Sala - Startup & SaaS WordPress Theme Web / CMS
  • Critical 10.0
    CVE-2025-34077 Public exploit Scanner template EPSS 17%

    WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE

    An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manip…

    Genetech Solutions WordPress Pie Register Plugin Web / CMS