Skip to content
OpenAdvisories

Archive

11 October 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-10175 Public exploit

    WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection

    The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …

  • Medium 5.3
    CVE-2025-9196 Public exploit Scanner template

    Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure

    The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on instal…

  • Medium 5.9
    CVE-2025-11380 Public exploit

    Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure

    The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everest_process_status' AJAX action in all versions up to, and includi…