Skip to content
OpenAdvisories

Archive

15 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /15 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-11832 Public exploit

    APIs Lack Rate Limiting

    Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

    Azure Access Technology BLU-IC4 BLU-IC2
  • Critical 9.8
    CVE-2025-10294 Public exploit

    OwnID Passwordless Login <= 1.3.4 - Authentication Bypass

    The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownid_shared_secret value is empty prior to authenticating a user via …

    victornavarro OwnID Passwordless Login Web / CMS
  • Critical 9.8
    CVE-2025-9967 Public exploit

    Orion SMS OTP Verification <= 1.1.7 - Authentication Bypass via Account Takeover

    The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. T…

    gsayed786 Orion SMS OTP Verification. Web / CMS
  • Critical 9.8
    CVE-2025-10041 Public exploit

    Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

    The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesave_qr_code_to_db() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers t…

    ajitdas Flex QR Code Generator Web / CMS