Skip to content
OpenAdvisories

Archive

27 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /27 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

53 results · Feed

  • High 7.2
    CVE-2025-9816 Public exploit EPSS 12%

    WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header

    The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to insufficient input sanitization and output e…

    VeronaLabs WP Statistics – Simple, privacy-friendly Google Analytics alternative Web / CMS
  • Medium 6.3
    CVE-2025-11049

    Portabilis i-Educar unificacao-aluno improper authorization

    A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The e…

    Portabilis i-Educar
  • Medium 4.3
    CVE-2025-10498

    Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion

    The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes…

    kstover Ninja Forms – The Contact Form Builder That Grows With You Web / CMS
  • Medium 4.3
    CVE-2025-10499

    Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update

    The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation on the maybe_opt_in() function. …

    kstover Ninja Forms – The Contact Form Builder That Grows With You Web / CMS
  • Medium 6.4
    CVE-2025-8440

    Team Members <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Team Members plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the first and last name fields in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authentica…

    spwebguy Team Members Web / CMS
  • Medium 6.1
    CVE-2025-36239

    IBM Storage TS4500 Library cross-site scripting

    IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cred…

    IBM Storage TS4500 Library
  • Medium 6.5
    CVE-2024-43192

    IBM Storage TS4500 Library cross-site request forgery

    IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

    IBM Storage TS4500 Library
  • High 8.1
    CVE-2025-59945

    SysReptor Susceptible to Privilege Escalation by Authenticated Users

    SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged (non-admin) users can assign the is_project_admin permission to their own user. This allows users to read, modify and dele…

    Syslifters sysreptor
  • High 8.6
    CVE-2025-59932

    FlagForgeCTF Unauthenticated Resource Modification/Deletion

    Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create,…

    FlagForgeCTF flagForge
  • High 8.8
    CVE-2025-59939

    WeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`.

    WeGIA is a Web manager for charitable institutions. Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks in the control.php endpoint with the following parameters: nomeClasse=ProdutoControle&metodo=excluir&id_produto=[malicious command]. It is…

    LabRedesCefetRJ WeGIA
  • Medium 6.5
    CVE-2025-59938

    Heap buffer overflow in wazuh-analysisd

    Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel message…

    wazuh wazuh
  • Critical 9.4
    CVE-2025-59936

    get-jwks poisoned JWKS cache allows post-fetch issuer validation bypass

    get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache poisoning in the JWKS key-fetching mechanism. When the iss (issuer) claim is validated only after keys are retrieved from the cache, it is …

    nearform get-jwks get-jwks npm
  • Low 3.3
    CVE-2025-36144

    IBM watsonx.data information disclosure

    IBM Lakehouse (watsonx.data 2.2) stores potentially sensitive information in log files that could be read by a local user.

    IBM watsonx.data