Skip to content
OpenAdvisories

Archive

9 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /9 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2025-6970 Public exploit Scanner template EPSS 56%

    Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter

    The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and …

    netweblogic Events Manager – Calendar, Bookings, Tickets, and more! Web / CMS
  • High 8.2
    CVE-2025-53652 Public exploit

    Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check

    Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.

    Jenkins Project Jenkins Git Parameter Plugin org.jenkins-ci.tools:git-parameter Web / CMS Maven
  • Critical 9.1
    CVE-2025-53546 Public exploit

    Folo allows secrets exfiltration via `pull_request_target`

    Folo organizes feeds content into one timeline. Using pull_request_target on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploitin…

    RSSNext Folo
  • Critical 9.6
    CVE-2025-6514 Public exploit EPSS 77%

    OS command injection in mcp-remote when connecting to untrusted MCP servers

    mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

    mcp-remote npm
  • High 7.8
    CVE-2025-38248 Public exploit

    bridge: mcast: Fix use-after-free during router port configuration

    In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides. The list is consulted during forwarding…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2025-4606 Public exploit

    Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover

    The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their de…

    uxper Sala - Startup & SaaS WordPress Theme Web / CMS
  • Critical 10.0
    CVE-2025-34077 Public exploit Scanner template EPSS 17%

    WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE

    An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manip…

    Genetech Solutions WordPress Pie Register Plugin Web / CMS
  • High 8.2
    CVE-2025-44177 Public exploit Scanner template

    A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically…

  • Medium 4.1
    CVE-2025-52357 Public exploit

    Cross-Site Scripting (XSS) vulnerability exists in the ping diagnostic feature of FiberHome FD602GW-DX-R410 router (fir…