Skip to content
OpenAdvisories

Archive

9 July 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2025-6970 Public exploit Scanner template EPSS 56%

    Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter

    The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and …

  • High 8.2
    CVE-2025-53652 Public exploit

    Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check

    Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.

  • High 7.8
    CVE-2025-38248 Public exploit

    bridge: mcast: Fix use-after-free during router port configuration

    In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides. The list is consulted during forwarding…

  • High 8.2
    CVE-2025-44177 Public exploit Scanner template

    A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically…