Skip to content
OpenAdvisories

Archive

7 October 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.6
    CVE-2025-10162 Public exploit Scanner template

    OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read

    The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin through 15.1 does not validate the path of files to be downloaded, which could allow unauthenticated users (before version 15.0) and any authenticated user such as a Subs…

  • High 7.8
    CVE-2025-50505 Public exploit

    Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(clash-verge-service) by default …