Skip to content
OpenAdvisories

Archive

12 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /12 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-36849 Public exploit

    AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload

    The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to, and including, 3.0.3. This makes it po…

    AIT Themes AIT CSV import/export Web / CMS
  • High 7.5
    CVE-2020-36848 Public exploit

    Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download

    The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This makes it pos…

    Bold Grid Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid Web / CMS
  • Critical 9.8
    CVE-2020-36847 Public exploit Scanner template EPSS 59%

    Simple File List < 4.2.3 - Remote Code Execution

    The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which can be used to rename uploaded PHP code with a png extension to use a php extension. This allows unauthentic…

    eemitch Simple File List Web / CMS
  • High 7.3
    CVE-2025-7461 Public exploit

    code-projects Modern Bag action.php sql injection

    A vulnerability was found in code-projects Modern Bag 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument proId leads to sql injection. The attack may be launched remot…

    code-projects Modern Bag
  • Critical 9.8
    CVE-2025-6058 Public exploit Scanner template

    WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

    The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4. This makes it possible for…

    Iqonic Design WPBookit Web / CMS