Skip to content
OpenAdvisories

Archive

November 2025

Vulnerabilities first published in this month (UTC), newest first.

← October 2025 2025 / November December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • Medium 5.5
    CVE-2025-43426 Public exploit

    A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Taho…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 4.9
    CVE-2025-43504 Public exploit

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privilege…

    Apple Xcode
  • Medium 5.4
    CVE-2025-50363 Public exploit

    Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the nam…

  • Medium 4.9
    CVE-2025-12137 Public exploit

    Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read

    The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.14.16. This is due to the plugin's REST API endpoint accepting arbitrary absolute file paths wit…

    jcollings Import WP – Export and Import CSV and XML files to WordPress Web / CMS
  • Medium 6.5
    CVE-2025-11740 Public exploit

    wpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL Injection

    The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to, and including, 2.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL q…

    Tomdever wpForo Forum Web / CMS
  • Medium 5.3
    CVE-2025-11174 Public exploit

    Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure

    The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6. This is due to the plugin exposing an unauthenticated AJAX action dll_load_posts which returns a JSON table of document data wi…

    Barn2 Media Document Library Lite Web / CMS