Skip to content
OpenAdvisories

Archive

12 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /12 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-36849 Public exploit

    AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload

    The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to, and including, 3.0.3. This makes it po…

    AIT Themes AIT CSV import/export Web / CMS
  • Critical 9.8
    CVE-2020-36847 Public exploit Scanner template EPSS 59%

    Simple File List < 4.2.3 - Remote Code Execution

    The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which can be used to rename uploaded PHP code with a png extension to use a php extension. This allows unauthentic…

    eemitch Simple File List Web / CMS
  • Critical 9.8
    CVE-2025-6058 Public exploit Scanner template

    WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

    The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4. This makes it possible for…

    Iqonic Design WPBookit Web / CMS