Skip to content
OpenAdvisories

Archive

19 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /19 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-7840 Public exploit

    Campcodes Online Movie Theater Seat Reservation System Reserve Your Seat Page index.php cross site scripting

    A vulnerability was found in Campcodes Online Movie Theater Seat Reservation System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?page=reserve of the component Reserve Your Seat Page. The manipulation of the a…

    Campcodes Online Movie Theater Seat Reservation System
  • Critical 9.8
    CVE-2015-10138 Public exploit

    Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload

    The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0 server and test files in versions up to, and including, 2.5.2. This makes it possible for unauthenti…

    lynton_reed Work The Flow File Upload Web / CMS
  • High 8.8
    CVE-2015-10139 Public exploit

    WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation

    The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new…

    VibeThemes WPLMS Learning Management System for WordPress, WordPress LMS Web / CMS
  • High 7.2
    CVE-2015-10133 Public exploit

    Subscribe to Comments <= 2.1.2 - Local File Includion

    The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value. This allows authenticated attackers, with administrative privileges and above, to include and execute arbitrary…

    Mark Jaquith Subscribe to Comments
  • Critical 9.8
    CVE-2015-10135 Public exploit

    WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload

    The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6. This makes it possible for unauthenticated attackers to upload arbitrary files on…

    eoxia WPshop 2 – E-Commerce Web / CMS
  • Critical 9.8
    CVE-2012-10019 Public exploit

    Front-end Editor < 2.3 - Arbitrary File Upload

    The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affecte…

    scribu Front-end Editor Web / CMS
  • Critical 9.8
    CVE-2016-15043 Public exploit Scanner template

    WP Mobile Detector <= 3.5 - Arbitrary File Upload

    The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in resize.php file in versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to upload arbitrary files on…

    Websitez.com WP Mobile Detector Web / CMS
  • High 7.5
    CVE-2015-10136 Public exploit

    GI-Media Library < 3.0 - Directory Traversal

    The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive informat…

    zishanj GI-Media Library Web / CMS
  • High 7.5
    CVE-2015-10134 Public exploit

    Simple Backup <= 2.7.10 - Arbitrary File Download via Path Traversal

    The Simple Backup plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 2.7.10. via the download_backup_file function. This is due to a lack of capability checks and file type validation. This makes it possible for at…

    mywebsiteadvisor Simple Backup Web / CMS
  • High 7.5
    CVE-2025-54313 Exploited Public exploit

    eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code

    eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

    prettier eslint-config-prettier napi-postinstall eslint-plugin-prettier npm
    KEV Jan 22, 2026