CVEs

414,232 total · page 2509 of 8,285

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-6537	WordPress Namasha	Med	0.42	6.4	0.00	Jun 26, 2025	The Namasha By Mdesign plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘playicon_title’ parameter in all versions up to, and including, 1.2.00 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
CVE-2025-5932	WordPress Homerunner	Med	0.28	4.3	0.00	Jun 26, 2025	The Homerunner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.30. This is due to missing or incorrect nonce validation on the main_settings() function. This makes it possible for unauthenticated attackers to update…
CVE-2025-5929	WordPress The Countdown	Med	0.42	6.4	0.00	Jun 26, 2025	The The Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘clientId’ parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
CVE-2025-5813	WordPress Amazon Products to WooCommerce	Med	0.34	5.3	0.00	Jun 26, 2025	The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcta2w_get_amazon_product_callback() function in all versions up to, and including, 1.2.7. This makes it possible for…
CVE-2025-5275	WordPress Charitable	Med	0.29	4.4	0.00	Jun 26, 2025	The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the privacy settings fields in all versions up to, and including, 1.8.6.1 due to insufficient input sanitization…
CVE-2025-6538	Post Rating and Review Post Rating and Review	Med	0.42	6.4	0.00	Jun 26, 2025	The Post Rating and Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
CVE-2025-6383	WP-PhotoNav WP-PhotoNav	Med	0.42	6.4	0.00	Jun 26, 2025	The WP-PhotoNav plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's photonav shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…
CVE-2025-6378	Corporatezen Responsive Food And Drink Menu	Med	0.42	6.4	0.00	Jun 26, 2025	The Responsive Food and Drink Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_pdf_menus shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes.…
CVE-2025-6290	WordPress Tournament Bracket Generator	Med	0.42	6.4	0.00	Jun 26, 2025	The Tournament Bracket Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bracket' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
CVE-2025-6258	WordPress Wp Soundsystem	Med	0.42	6.4	0.00	Jun 26, 2025	The WP SoundSystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsstm-track shortcode in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
CVE-2025-5812	WordPress VG WORT METIS	Med	0.21	4.3	0.00	Jun 26, 2025	The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gutenberg_save_post() function in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with…
CVE-2025-5590	WordPress Responsive Owl Carousel	Hig	0.57	8.8	0.00	Jun 26, 2025	The Owl carousel responsive plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
CVE-2025-5588	WordPress Image Editor By Pixo	Med	0.35	6.4	0.00	Jun 26, 2025	The Image Editor by Pixo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘download’ parameter in all versions up to, and including, 2.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
CVE-2025-5564	WordPress Gc Social Wall	Med	0.42	6.4	0.00	Jun 26, 2025	The GC Social Wall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gc_social_wall' shortcode in all versions up to, and including, 1.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
CVE-2025-5559	WordPress TimeZoneCalculator	Med	0.42	6.4	0.00	Jun 26, 2025	The TimeZoneCalculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'timezonecalculator_output' shortcode in all versions up to, and including, 3.37 due to insufficient input sanitization and output escaping on user supplied attributes. This…
CVE-2025-5540	WordPress Event RSVP and Simple Event Management Plugin	Med	0.42	6.4	0.00	Jun 26, 2025	The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied…
CVE-2025-5535	WordPress Enigma Buttons	Med	0.42	6.4	0.00	Jun 26, 2025	The e.nigma buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
CVE-2025-5488	WordPress Wp Masonry & Infinite Scroll	Med	0.42	6.4	0.00	Jun 26, 2025	The WP Masonry & Infinite Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wmis' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
CVE-2025-4334	WordPress Simple User Registration	Cri	0.57	9.8	0.03	Jun 26, 2025	The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated…
CVE-2025-3863	WordPress Post Carousel Slider For Elementor	Med	0.28	4.3	0.00	Jun 26, 2025	The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the process_wbelps_promo_form() function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with…
CVE-2025-6669	Gooaclok819 Sublinkx	Low	0.24	3.7	0.00	Jun 25, 2025	A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file middlewares/jwt.go. The manipulation with the input sublink leads to use of hard-coded cryptographic key . The attack can be…
CVE-2025-6668	Code Projects Inventory Management System	Hig	0.47	7.3	0.00	Jun 25, 2025	A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /php_action/fetchSelectedBrand.php. The manipulation of the argument brandId leads to sql injection. It is possible to…
CVE-2025-6667	Anisha Car Rental System	Med	0.41	6.3	0.00	Jun 25, 2025	A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add_cars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched…
CVE-2025-6662	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6661	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target…
CVE-2025-6660	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in…
CVE-2025-6659	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6658	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6657	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6656	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6655	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6654	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6653	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6652	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6651	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6650	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6649	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6648	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6647	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6646	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in…
CVE-2025-6645	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…
CVE-2025-6644	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…
CVE-2025-6643	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6642	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6641	PDF-XChange Editor	Low	0.21	3.3	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6640	PDF-XChange Editor	Hig	0.51	7.8	0.00	Jun 25, 2025	PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…
CVE-2025-6443	Mikrotik Routeros	Hig	0.47	7.2	0.01	Jun 25, 2025	Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability. This vulnerability allows remote attackers to bypass access restrictions on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vulnerability. The specific flaw…
CVE-2025-6665	Code Projects Inventory Management System	Hig	0.47	7.3	0.00	Jun 25, 2025	A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /php_action/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection.…
CVE-2025-6664	Codeastro Patient Record Management System	Med	0.28	4.3	0.00	Jun 25, 2025	A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed…
CVE-2025-36038	IBM Websphere Application Server	Cri	0.59	9.0	0.13	Jun 25, 2025	IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.

CVE-2025-6537MedJun 26, 2025
WordPress
Namasha
risk 0.42cvss 6.4epss 0.00
The Namasha By Mdesign plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘playicon_title’ parameter in all versions up to, and including, 1.2.00 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
CVE-2025-5932MedJun 26, 2025
WordPress
Homerunner
risk 0.28cvss 4.3epss 0.00
The Homerunner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.30. This is due to missing or incorrect nonce validation on the main_settings() function. This makes it possible for unauthenticated attackers to update…
CVE-2025-5929MedJun 26, 2025
WordPress
The Countdown
risk 0.42cvss 6.4epss 0.00
The The Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘clientId’ parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
CVE-2025-5813MedJun 26, 2025
WordPress
Amazon Products to WooCommerce
risk 0.34cvss 5.3epss 0.00
The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcta2w_get_amazon_product_callback() function in all versions up to, and including, 1.2.7. This makes it possible for…
CVE-2025-5275MedJun 26, 2025
WordPress
Charitable
risk 0.29cvss 4.4epss 0.00
The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the privacy settings fields in all versions up to, and including, 1.8.6.1 due to insufficient input sanitization…
CVE-2025-6538MedJun 26, 2025
Post Rating and Review
Post Rating and Review
risk 0.42cvss 6.4epss 0.00
The Post Rating and Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
CVE-2025-6383MedJun 26, 2025
WP-PhotoNav
WP-PhotoNav
risk 0.42cvss 6.4epss 0.00
The WP-PhotoNav plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's photonav shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…
CVE-2025-6378MedJun 26, 2025
Corporatezen
Responsive Food And Drink Menu
risk 0.42cvss 6.4epss 0.00
The Responsive Food and Drink Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_pdf_menus shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes.…
CVE-2025-6290MedJun 26, 2025
WordPress
Tournament Bracket Generator
risk 0.42cvss 6.4epss 0.00
The Tournament Bracket Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bracket' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
CVE-2025-6258MedJun 26, 2025
WordPress
Wp Soundsystem
risk 0.42cvss 6.4epss 0.00
The WP SoundSystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsstm-track shortcode in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
CVE-2025-5812MedJun 26, 2025
WordPress
VG WORT METIS
risk 0.21cvss 4.3epss 0.00
The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gutenberg_save_post() function in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with…
CVE-2025-5590HigJun 26, 2025
WordPress
Responsive Owl Carousel
risk 0.57cvss 8.8epss 0.00
The Owl carousel responsive plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
CVE-2025-5588MedJun 26, 2025
WordPress
Image Editor By Pixo
risk 0.35cvss 6.4epss 0.00
The Image Editor by Pixo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘download’ parameter in all versions up to, and including, 2.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
CVE-2025-5564MedJun 26, 2025
WordPress
Gc Social Wall
risk 0.42cvss 6.4epss 0.00
The GC Social Wall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gc_social_wall' shortcode in all versions up to, and including, 1.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
CVE-2025-5559MedJun 26, 2025
WordPress
TimeZoneCalculator
risk 0.42cvss 6.4epss 0.00
The TimeZoneCalculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'timezonecalculator_output' shortcode in all versions up to, and including, 3.37 due to insufficient input sanitization and output escaping on user supplied attributes. This…
CVE-2025-5540MedJun 26, 2025
WordPress
Event RSVP and Simple Event Management Plugin
risk 0.42cvss 6.4epss 0.00
The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied…
CVE-2025-5535MedJun 26, 2025
WordPress
Enigma Buttons
risk 0.42cvss 6.4epss 0.00
The e.nigma buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
CVE-2025-5488MedJun 26, 2025
WordPress
Wp Masonry & Infinite Scroll
risk 0.42cvss 6.4epss 0.00
The WP Masonry & Infinite Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wmis' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
CVE-2025-4334CriJun 26, 2025
WordPress
Simple User Registration
risk 0.57cvss 9.8epss 0.03
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated…
CVE-2025-3863MedJun 26, 2025
WordPress
Post Carousel Slider For Elementor
risk 0.28cvss 4.3epss 0.00
The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the process_wbelps_promo_form() function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with…
CVE-2025-6669LowJun 25, 2025
Gooaclok819
Sublinkx
risk 0.24cvss 3.7epss 0.00
A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file middlewares/jwt.go. The manipulation with the input sublink leads to use of hard-coded cryptographic key . The attack can be…
CVE-2025-6668HigJun 25, 2025
Code Projects
Inventory Management System
risk 0.47cvss 7.3epss 0.00
A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /php_action/fetchSelectedBrand.php. The manipulation of the argument brandId leads to sql injection. It is possible to…
CVE-2025-6667MedJun 25, 2025
Anisha
Car Rental System
risk 0.41cvss 6.3epss 0.00
A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add_cars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched…
CVE-2025-6662LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6661HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target…
CVE-2025-6660HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in…
CVE-2025-6659HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6658LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6657LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6656LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6655LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6654HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6653LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6652LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6651HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6650LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6649LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6648LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6647HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6646LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in…
CVE-2025-6645HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…
CVE-2025-6644HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…
CVE-2025-6643LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6642HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…
CVE-2025-6641LowJun 25, 2025
PDF-XChange
Editor
risk 0.21cvss 3.3epss 0.00
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…
CVE-2025-6640HigJun 25, 2025
PDF-XChange
Editor
risk 0.51cvss 7.8epss 0.00
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…
CVE-2025-6443HigJun 25, 2025
Mikrotik
Routeros
risk 0.47cvss 7.2epss 0.01
Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability. This vulnerability allows remote attackers to bypass access restrictions on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vulnerability. The specific flaw…
CVE-2025-6665HigJun 25, 2025
Code Projects
Inventory Management System
risk 0.47cvss 7.3epss 0.00
A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /php_action/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection.…
CVE-2025-6664MedJun 25, 2025
Codeastro
Patient Record Management System
risk 0.28cvss 4.3epss 0.00
A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed…
CVE-2025-36038CriJun 25, 2025
IBM
Websphere Application Server
risk 0.59cvss 9.0epss 0.13
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.