Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

16,974 of 48,153· Page 208/340
8.8
CVE-2025-4824

A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This a

8.8
CVE-2025-4823

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Aff

7.2
CVE-2025-4190

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege us

8.1
CVE-2025-3812

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file p

7.3
CVE-2025-4818

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been rated as critical. This issue a

7.3
CVE-2025-4817

A vulnerability was found in Sourcecodester Doctor's Appointment System 1.0. It has been declared as critical. This vuln

7.3
CVE-2025-4816

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been classified as critical. This af

7.3
CVE-2025-4815

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue

7.3
CVE-2025-4814

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this

7.5
CVE-2025-1706

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

7.3
CVE-2025-4813

A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management Syst

7.3
CVE-2025-4812

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management

7.3
CVE-2025-4811

A vulnerability was found in CodeAstro Pharmacy Management System 1.0. It has been rated as critical. Affected by this i

8.8
CVE-2025-4810

A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. Affected by this vulnerability is

8.8
CVE-2025-4809

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function fromSaf

7.8
CVE-2025-4802

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker c

7.3
CVE-2025-4794

A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been declared as critical. Affected by th

7.3
CVE-2025-4793

A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is

7.3
CVE-2025-4792

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown proces

7.3
CVE-2025-4791

A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknow

7.3
CVE-2025-4790

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part o

7.3
CVE-2025-4789

A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is

7.3
CVE-2025-4788

A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unkno

7.1
CVE-2025-48146

Cross-Site Request Forgery (CSRF) vulnerability in Michael Lups SEO Flow by LupsOnline lupsonline-link-netwerk allows St

7.1
CVE-2025-48144

Cross-Site Request Forgery (CSRF) vulnerability in sidngr Import Export For WooCommerce import-export-for-woocommerce al

8.5
CVE-2025-48137

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in proxymis Interview

7.5
CVE-2025-48136

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

7.2
CVE-2025-48134

Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC WP Tabs wp-expand-tabs-free allows Object Injection.

7.1
CVE-2025-48114

Cross-Site Request Forgery (CSRF) vulnerability in Shayan Farhang Pazhooh ShayanWeb Admin FontChanger shayanweb-admin-fo

7.1
CVE-2025-48112

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in karimmughal Dot ht

7.5
CVE-2025-47693

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

7.6
CVE-2025-47567

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video

7.1
CVE-2025-39537

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blaze Concepts Bet

7.5
CVE-2025-39507

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

7.5
CVE-2025-39492

Path Traversal vulnerability in WHMPress WHMpress allows Relative Path Traversal. This issue affects WHMpress: from 6.2

8.1
CVE-2025-39491

Path Traversal vulnerability in WHMPress WHMpress allows Path Traversal. This issue affects WHMpress: from 6.2 through r

8.8
CVE-2025-32310

Cross-Site Request Forgery (CSRF) vulnerability in ThemeMove QuickCal - Appointment Booking Calendar for WordPress quick

8.5
CVE-2025-32307

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Chame

8.5
CVE-2025-32306

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio

8.5
CVE-2025-32301

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Count

8.5
CVE-2025-32290

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Stick

8.5
CVE-2025-32287

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Respo

8.5
CVE-2025-31928

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multi

8.5
CVE-2025-31926

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Stick

7.1
CVE-2025-31922

Cross-Site Request Forgery (CSRF) vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Sto

8.5
CVE-2025-31641

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup UberS

8.5
CVE-2025-31640

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic

8.5
CVE-2025-31637

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup SHOUT

7.3
CVE-2025-4785

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by thi

7.5
CVE-2025-4600

A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer due to improper handling

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.