Skip to content
OpenAdvisories

Archive

3 September 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.0
    CVE-2025-53690 Exploited Public exploit EPSS 61%

    Sitecore Products ViewState Deserialization Vulnerability

    Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.

    KEV Sep 4, 2025
  • Critical 9.8
    CVE-2025-53693 Public exploit EPSS 20%

    HTML Cache Poisoning through Unsafe Reflections

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9…

  • Critical 9.8
    CVE-2024-32444 Public exploit

    WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes realhomes allows Privilege Escalation.This issue affects RealHomes: from n/a through <= 4.3.6.

  • Critical 9.8
    CVE-2025-57052 Public exploit

    cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.…