Skip to content
OpenAdvisories

Archive

22 October 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2025-62023 Public exploit

    WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905.

  • Critical 9.8
    CVE-2025-49901 Public exploit

    WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.