Skip to content
OpenAdvisories

Archive

27 September 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-11077 Public exploit

    Campcodes Online Learning Management System add_content.php sql injection

    A vulnerability was determined in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/add_content.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be executed remotely.…

  • High 7.2
    CVE-2025-9816 Public exploit EPSS 12%

    WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header

    The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to insufficient input sanitization and output e…