Skip to content
OpenAdvisories

Archive

11 November 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-12539 Public exploit

    TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover

    The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials (hostname, username, and API key) in files within the w…

  • Critical 9.8
    CVE-2025-11170 Public exploit

    WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload

    The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import function in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated at…