Skip to content
OpenAdvisories

Archive

11 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /11 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

53 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-9496

    Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode

    The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file_modified shortcode in all versions up to, and including, 4.1.6 due to insufficient input sanitization and output escaping on user supplied attribu…

    ShortPixel Enable Media Replace Web / CMS
  • Medium 6.3
    CVE-2025-11593

    CodeAstro Gym Management System delete-equipment.php sql injection

    A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit…

    CodeAstro Gym Management System
  • Medium 6.3
    CVE-2025-11592

    CodeAstro Gym Management System edit-equipmentform.php sql injection

    A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now …

    CodeAstro Gym Management System
  • Medium 6.3
    CVE-2025-11591

    CodeAstro Gym Management System delete-member.php sql injection

    A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be…

    CodeAstro Gym Management System
  • Medium 5.3
    CVE-2025-58285

    Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service …

    Huawei HarmonyOS Network devices
  • Medium 5.9
    CVE-2025-58284

    Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect servic…

    Huawei HarmonyOS Network devices
  • Medium 5.5
    CVE-2025-58283

    Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service …

    Huawei HarmonyOS Network devices
  • Medium 6.2
    CVE-2025-58278

    Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affe…

    Huawei HarmonyOS Network devices
  • Medium 4.0
    CVE-2025-58277

    Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affec…

    Huawei HarmonyOS Network devices
  • Medium 5.9
    CVE-2025-11380 Public exploit

    Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure

    The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everest_process_status' AJAX action in all versions up to, and includi…

    Everest themes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin Web / CMS
  • Medium 6.4
    CVE-2025-9560

    Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode

    The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's colibri_newsletter shortcode in all versions up to, and including, 1.0.334 due to insufficient input sanitization and output escaping on user supplied …

    Extend Themes Colibri Page Builder Web / CMS
  • Medium 6.2
    CVE-2025-54654

    Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect servic…

    Huawei HarmonyOS Network devices
  • Medium 6.3
    CVE-2025-11590

    CodeAstro Gym Management System equipment-entry.php sql injection

    A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql injection. It is possible …

    CodeAstro Gym Management System