Skip to content
OpenAdvisories

Archive

7 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /7 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

139 results · Clear filters · Feed

  • Medium 4.4
    CVE-2025-14888

    Simple User Meta Editor <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via User Meta Value Field

    The Simple User Meta Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user meta value field in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for auth…

    anjan011 Simple User Meta Editor Web / CMS
  • Medium 4.3
    CVE-2025-13657

    HelpDesk contact form plugin <= 1.1.5 - Cross-Site Request Forgery to Settings Update via handle_query_args

    The HelpDesk contact form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing or incorrect nonce validation on the handle_query_args() function. This makes it possible for unauth…

    helpdeskcom HelpDesk Contact Form Web / CMS
  • Medium 4.4
    CVE-2025-14887

    twinklesmtp – Email Service Provider For WordPress <= 1.03 - Authenticated (Administrator+) Stored Cross-Site Scripting via Sender Settings

    The twinklesmtp – Email Service Provider For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's sender settings in all versions up to, and including, 1.03 due to insufficient input sanitization and output escaping. This m…

    wpcommerz twinklesmtp – Email Service Provider For WordPress Web / CMS
  • Medium 4.3
    CVE-2025-14370

    Quote Comments <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update

    The Quote Comments plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0.0. This is due to missing authorization checks in the quotecomments_add_admin function. This makes it possible for authenticated attackers…

    metodiew Quote Comments Web / CMS
  • Medium 6.1
    CVE-2025-14875

    HBLPAY Payment Gateway for WooCommerce <= 5.0.0 - Reflected Cross-Site Scripting via 'cusdata' Parameter

    The HBLPAY Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cusdata’ parameter in all versions up to, and including, 5.0.0 due to insufficient input sanitization and output escaping. This makes it p…

    hblpay HBLPAY Payment Gateway for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2025-14904

    Newsletter Email Subscribe <= 2.4 - Cross-Site Request Forgery to Plugin Settings Update

    The Newsletter Email Subscribe plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4. This is due to incorrect nonce validation on the nels_settings_page function. This makes it possible for unauthenticated att…

    anilankola Newsletter Email Subscribe Web / CMS
  • Medium 6.5
    CVE-2025-14901

    Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay

    The Bit Form – Contact Form Plugin plugin for WordPress is vulnerable to unauthorized workflow execution due to missing authorization in the triggerWorkFlow function in all versions up to, and including, 2.21.6. This is due to a logic flaw in the nonce verifi…

    bitpressadmin Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder Web / CMS
  • Medium 4.9
    CVE-2025-14719

    Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi

    The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and escape a parameter before using it in a SQL statement, allowing contributor and above roles to perform SQL injection attacks

    Web / CMS
  • Medium 5.3
    CVE-2025-15474 Public exploit

    AuntyFey Smart Combination Lock BLE Connection Flood DoS

    AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticated attacker within Bluetooth Low Energy (BLE) range to cause a denial of service by repeatedly initiating BLE connections. Sustained connect…

    AuntyFey AuntyFey Smart Combination Lock
  • Medium 4.3
    CVE-2025-14468

    AMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission

    The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to inverted nonce verification logic in the amp_theme_ajaxcomments AJAX handler, which rejects requ…

    mohammed_kaludi AMP for WP – Accelerated Mobile Pages Web / CMS
  • Medium 6.5
    CVE-2025-14059

    EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal

    The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.6.1. This is due to missing path validation in the create_template REST API endpoint where user-controlled input from the emailki…

    roxnor EmailKit – Email Customizer for WooCommerce & WP Web / CMS
  • Medium 6.4
    CVE-2025-14891

    Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter

    The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'displayName' parameter in all versions up to, and including, 5.93.1 due to insufficient input sanitization and output escaping. This makes it possi…

    ivole Customer Reviews for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2025-12648

    WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files

    The WP-Members Membership Plugin for WordPress is vulnerable to unauthorized file access in versions up to, and including, 3.5.4.4. This is due to storing user-uploaded files in predictable directories (wp-content/uploads/wpmembers/user_files/<user_id>/) with…

    cbutlerjr WP-Members Membership Plugin Web / CMS
  • Medium 4.7
    CVE-2026-0649

    invoiceninja Migration Import Import.php copy server-side request forgery

    A security vulnerability has been detected in invoiceninja up to 5.12.38. The affected element is the function copy of the file /app/Jobs/Util/Import.php of the component Migration Import. The manipulation of the argument company_logo leads to server-side req…

  • Medium 5.0
    CVE-2024-14020

    carboneio carbone Formatter input.js prototype pollution

    A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modifi…

    carboneio carbone carbone npm
  • Medium 6.8
    CVE-2025-66837 Public exploit

    A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafte…

  • Medium 6.5
    CVE-2025-66838 Public exploit

    In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, …

  • Medium 6.1
    CVE-2025-66686

    A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated attacker with admin…

  • Medium 6.5
    CVE-2025-61489

    A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute a…