VYPR

CVEs

410,375 total · page 2002 of 8,208

AllCriticalHighKEV
  • CVE-2025-56704HigDec 9, 2025
    Lepton CMS
    LeptonCMS
    risk 0.57cvss 8.8epss 0.01

    LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a specially crafted ZIP/PHP file to execute arbitrary code.

  • CVE-2025-12946HigDec 9, 2025
    Netgear
    Nighthawk Routers
    risk 0.49cvss 7.5epss 0.00

    A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are…

  • CVE-2025-12945LowDec 9, 2025
    Netgear
    Nighthawk R7000
    risk 0.16cvss 2.4epss 0.01

    An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and…

  • CVE-2025-12941MedDec 9, 2025
    Netgear
    C6220
    risk 0.37cvss 5.7epss 0.00

    Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router.

  • CVE-2023-23729MedDec 9, 2025
    WordPress
    Spectra
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through 2.3.0.

  • CVE-2023-22675MedDec 9, 2025
    WordPress
    Wp Fast Cache
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Taylor Hawkes WP Fast Cache allows Cross Site Request Forgery.This issue affects WP Fast Cache: from n/a through 1.5.

  • CVE-2022-47425MedDec 9, 2025
    Reputeinfosystems
    Armember
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.

  • CVE-2022-46845MedDec 9, 2025
    WordPress
    Slider a SlidersPack
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Essential Plugin Slider a SlidersPack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider a SlidersPack: from n/a before 2.3.

  • CVE-2025-9638MedDec 9, 2025
    Portabilis
    I Educar
    risk 0.31cvss 4.8epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Portabilis i-Educar allows Stored Cross-Site Scripting (XSS) via the matricula_interna parameter in the educar_usuario_cad.php endpoint. This issue affects i-Educar: 2.10.0.

  • CVE-2025-9368HigDec 9, 2025
    risk 0.57cvss —epss 0.00

    A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service. A manual power cycle is required to recover the device.

  • CVE-2025-6924MedDec 9, 2025
    Talent Software
    e-BAP Automation
    risk 0.35cvss 5.4epss 0.00

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Reflected XSS. This issue affects e-BAP Automation: before 42957.

  • CVE-2025-6923MedDec 9, 2025
    Talent Software
    UNIS
    risk 0.35cvss 5.4epss 0.00

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software UNIS allows Reflected XSS. This issue affects UNIS: before 42957.

  • CVE-2025-67599MedDec 9, 2025
    WordPress
    WebToffee eCommerce Marketing Automation
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in WebToffee WebToffee eCommerce Marketing Automation decorator-woocommerce-email-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebToffee eCommerce Marketing Automation: from n/a through…

  • CVE-2025-67598MedDec 9, 2025
    WordPress
    Supportcandy
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cross Site Request Forgery.This issue affects SupportCandy: from n/a through <= 3.4.1.

  • CVE-2025-67597MedDec 9, 2025
    WordPress
    Fluent Booking
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Shahjahan Jewel Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through <= 1.9.11.

  • CVE-2025-67596MedDec 9, 2025
    WordPress
    Wp Business Directory
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Cross Site Request Forgery.This issue affects Business Directory: from n/a through <= 6.4.19.

  • CVE-2025-67595MedDec 9, 2025
    Ays Pro
    Quiz Maker
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.0.82.

  • CVE-2025-67594MedDec 9, 2025
    Thimpress
    Thim Elementor Kit
    risk 0.28cvss 4.3epss 0.00

    Authorization Bypass Through User-Controlled Key vulnerability in ThimPress Thim Elementor Kit thim-elementor-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thim Elementor Kit: from n/a through <= 1.3.3.

  • CVE-2025-67593MedDec 9, 2025
    WordPress
    Userswp
    risk 0.21cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1.2.48.

  • CVE-2025-67592MedDec 9, 2025
    WordPress
    My Calendar
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Joe Dolson My Calendar my-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Calendar: from n/a through <= 3.6.16.

  • CVE-2025-67591MedDec 9, 2025
    WordPress
    JNews Paywall
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall allows Cross Site Request Forgery.This issue affects JNews Paywall: from n/a through < 12.0.1.

  • CVE-2025-67590MedDec 9, 2025
    WordPress
    Ultimate FAQ
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate FAQ ultimate-faqs allows Cross Site Request Forgery.This issue affects Ultimate FAQ: from n/a through <= 2.4.3.

  • CVE-2025-67589MedDec 9, 2025
    WordPress
    Woocommerce PDF Invoices Packing Slips
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a…

  • CVE-2025-67588MedDec 9, 2025
    WordPress
    Elementor Website Builder
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through <= 3.33.0.

  • CVE-2025-67587MedDec 9, 2025
    WordPress
    WP Gravity Forms FreshDesk Plugin
    risk 0.31cvss 4.7epss 0.00

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.

  • CVE-2025-67586MedDec 9, 2025
    WordPress
    Highlight and Share
    risk 0.34cvss 4.7epss 0.00

    Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through <= 5.2.0.

  • CVE-2025-67585MedDec 9, 2025
    WordPress
    Flexmls Idx
    risk 0.31cvss 4.7epss 0.00

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a through <= 3.15.7.

  • CVE-2025-67584MedDec 9, 2025
    WordPress
    Godam
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in rtCamp GoDAM godam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDAM: from n/a through <= 1.4.6.

  • CVE-2025-67583MedDec 9, 2025
    Foysal Imran
    IDonate
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Foysal Imran IDonate idonate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonate: from n/a through <= 2.1.15.

  • CVE-2025-67582MedDec 9, 2025
    Wbcomdesigns
    lock-my-bp
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wbcom Designs: from n/a through <= 2.1.1.

  • CVE-2025-67581MedDec 9, 2025
    WordPress
    Truebooker Appointment Booking
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through <= 1.1.0.

  • CVE-2025-67580MedDec 9, 2025
    WordPress
    Constant Contact Woocommerce
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-contact-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact + WooCommerce: from n/a through <= 2.4.1.

  • CVE-2025-67579MedDec 9, 2025
    WordPress
    Wp User Extra Fields
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Extra Fields: from n/a through <= 16.8.

  • CVE-2025-67578MedDec 9, 2025
    WordPress
    Wp Email Capture
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Rhys Wynne WP Email Capture wp-email-capture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Email Capture: from n/a through <= 3.12.4.

  • CVE-2025-67577MedDec 9, 2025
    WordPress
    Easy Form Builder
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form Builder: from n/a through <= 3.8.20.

  • CVE-2025-67576MedDec 9, 2025
    WordPress
    Simple Link Directory
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through <= 8.8.3.

  • CVE-2025-67575MedDec 9, 2025
    WordPress
    Sitewide Notice WP
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sitewide Notice WP: from n/a through <= 2.4.1.

  • CVE-2025-67574MedDec 9, 2025
    WordPress
    Booking Calendar Appointment Booking System
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking System: from n/a through <= 3.2.30.

  • CVE-2025-67573MedDec 9, 2025
    WordPress
    Sailing
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sailing: from n/a through < 4.4.6.

  • CVE-2025-67572MedDec 9, 2025
    WordPress
    Pennews
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PenNews: from n/a through < 6.7.4.

  • CVE-2025-67571MedDec 9, 2025
    WordPress
    Wpfunnels
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through <= 3.6.2.

  • CVE-2025-67570MedDec 9, 2025
    WordPress
    WPForms Google Sheet Connector
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPForms Google Sheet Connector: from n/a through <= 4.0.0.

  • CVE-2025-67569MedDec 9, 2025
    WordPress
    AdForest
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in scriptsbundle AdForest adforest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AdForest: from n/a through <= 6.0.11.

  • CVE-2025-67568MedDec 9, 2025
    WordPress
    Basel
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in xtemos Basel basel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Basel: from n/a through <= 5.9.1.

  • CVE-2025-67567MedDec 9, 2025
    WordPress
    Sober
    risk 0.34cvss 5.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthemes Sober sober allows Retrieve Embedded Sensitive Data.This issue affects Sober: from n/a through <= 3.5.11.

  • CVE-2025-67566MedDec 9, 2025
    WordPress
    Woffice Core
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woffice Core: from n/a through <= 5.4.30.

  • CVE-2025-67565MedDec 9, 2025
    WordPress
    Rehub Theme
    risk 0.34cvss 5.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through <= 19.9.9.1.

  • CVE-2025-67564MedDec 9, 2025
    WordPress
    Pixel Manager for WooCommerce
    risk 0.34cvss 5.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv Pixel Manager for WooCommerce woocommerce-google-adwords-conversion-tracking-tag allows Retrieve Embedded Sensitive Data.This issue affects Pixel Manager for WooCommerce: from n/a…

  • CVE-2025-67563MedDec 9, 2025
    WordPress
    Post SMTP
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through <= 3.6.1.

  • CVE-2025-67562MedDec 9, 2025
    WordPress
    Image Caption Hover Pro
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Caption Hover Pro: from n/a through < 20.0.