Skip to content
OpenAdvisories

Archive

30 August 2025

Vulnerabilities first published on this day (UTC), newest first.

44 results · Feed

  • Critical 9.3

    SUNNET Corporate Training Management System - Missing Authorization

    A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

  • Critical 9.3

    SUNNET Corporate Training Management System - Missing Authentication for Critical Function

    A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

  • Medium 4.3

    WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability

    Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0.

  • Medium 4.3

    Related Posts Lite <= 1.12 - Cross-Site Request Forgery

    The Related Posts Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthent…