Skip to content
OpenAdvisories

Archive

25 November 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-13597 Public exploit

    AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload

    The AI Feeds plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.0.11. This makes it possible for unauthenticated attackers to download arbitra…

  • Critical 9.8
    CVE-2025-13595 Public exploit

    CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

    The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbit…

  • Critical 9.8
    CVE-2025-6389 Public exploit Scanner template EPSS 76%

    Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

    The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through c…

  • Critical 9.0
    CVE-2025-63729 Public exploit

    An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL P…