Skip to content
OpenAdvisories

Archive

29 December 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-68860 Public exploit

    WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through <= 1.4.2.

  • Critical 10.0
    CVE-2025-52691 Exploited · Ransomware Public exploit Scanner template EPSS 86%

    Upload Arbitrary Files

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

    KEV Jan 26, 2026
  • Critical 9.8
    CVE-2025-57460 Public exploit

    File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell.