Skip to content
OpenAdvisories

Archive

19 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /19 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2015-10139 Public exploit

    WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation

    The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new…

    VibeThemes WPLMS Learning Management System for WordPress, WordPress LMS Web / CMS
  • High 7.2
    CVE-2015-10133 Public exploit

    Subscribe to Comments <= 2.1.2 - Local File Includion

    The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value. This allows authenticated attackers, with administrative privileges and above, to include and execute arbitrary…

    Mark Jaquith Subscribe to Comments
  • High 7.5
    CVE-2015-10136 Public exploit

    GI-Media Library < 3.0 - Directory Traversal

    The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive informat…

    zishanj GI-Media Library Web / CMS
  • High 7.5
    CVE-2015-10134 Public exploit

    Simple Backup <= 2.7.10 - Arbitrary File Download via Path Traversal

    The Simple Backup plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 2.7.10. via the download_backup_file function. This is due to a lack of capability checks and file type validation. This makes it possible for at…

    mywebsiteadvisor Simple Backup Web / CMS
  • High 7.5
    CVE-2025-54313 Exploited Public exploit

    eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code

    eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

    prettier eslint-config-prettier napi-postinstall eslint-plugin-prettier npm
    KEV Jan 22, 2026