Skip to content
OpenAdvisories

Archive

20 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /20 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-10755

    Selleo Mentingo Content-Type unrestricted upload

    A vulnerability was detected in Selleo Mentingo 2025.08.27. The impacted element is an unknown function of the component Content-Type Handler. The manipulation of the argument userAvatar results in unrestricted upload. The attack may be performed from remote.…

    Selleo Mentingo
  • Medium 6.3
    CVE-2025-10741

    Selleo Mentingo Profile Picture unrestricted upload

    A security vulnerability has been detected in Selleo Mentingo up to 2025.08.27. The affected element is an unknown function of the component Profile Picture Handler. The manipulation of the argument userAvatar leads to unrestricted upload. The attack is possi…

    Selleo Mentingo
  • Medium 4.3
    CVE-2025-9887

    Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery

    The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation in the /frndzk_adminclsw.php file. This makes it possible for u…

    bittokazi Custom Login And Signup Widget Web / CMS
  • Medium 6.1
    CVE-2025-9882

    osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to up…

    michaelbo osTicket WP Bridge Web / CMS
  • Medium 6.1
    CVE-2025-9883

    Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Browser Sniff plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update se…

    bpedrassani Browser Sniff Web / CMS
  • Medium 6.5
    CVE-2025-10658 Public exploit

    SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover

    The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it p…

    PSM Plugins SupportCandy – Helpdesk & Customer Support Ticket System Web / CMS
  • Medium 4.3
    CVE-2025-9949

    Internal Links Manager <= 3.0.1 - Cross-Site Request Forgery

    The Internal Links Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the link deletion functionality in the process_bulk_action() funct…

    Webraketen Internal Links Manager Web / CMS
  • Medium 4.9
    CVE-2025-10002

    ClickWhale <= 2.5.0 - Authenticated (Admin+) SQL injection

    The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the export_csv() function in all versions up to, and including, 2.5.0 due to insufficient escaping on the …

    ClickWhale ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages Web / CMS
  • Medium 5.3
    CVE-2025-10305

    Secure Passkeys <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Passkey Exposure and Deletion

    The Secure Passkeys plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the delete_passkey() and passkeys_list() function in all versions up to, and including, 1.2.1. This makes it possible for authenticated attacker…

    endisha Secure Passkeys Web / CMS
  • Medium 4.3
    CVE-2025-10489

    SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation

    The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a missing capability check on the register_post_types() function in all versions u…

    Brainstorm Force SureForms – Contact Form, Payment Form & Other Custom Form Builder Web / CMS
  • Medium 6.4
    CVE-2025-10181

    Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes i…

    dartiss draft-list Web / CMS
  • Medium 6.5
    CVE-2025-10652

    Robcore Netatmo <= 1.7 - Authenticated (Contributor+) SQL Injection via robcore-netatmo Shortcode

    The Robcore Netatmo plugin for WordPress is vulnerable to SQL Injection via the ‘module_id’ attribute of the robcore-netatmo shortcode in all versions up to, and including, 1.7 due to insufficient escaping on the user supplied parameter and lack of sufficient…

    robcore89 Robcore Netatmo Web / CMS