Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 710/964
5.4
CVE-2025-2797

The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

8.8
CVE-2025-2780

The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing

4.3
CVE-2025-3214

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability i

7.3
CVE-2025-3213

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects

6.3
CVE-2025-3211

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affect

6.4
CVE-2025-2836

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu

7.5
CVE-2025-2317

The Product Filter by WBW plugin for WordPress is vulnerable to time-based SQL Injection via the filtersDataBackend para

5.9
CVE-2025-2279

The Maps WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting

8.1
CVE-2025-2270

The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Local File Inclusion i

N/A
CVE-2025-2159

Stored XSS in Desktop UI in M-Files Server Admin tool before version 25.3.14681.7 on Windows allows authenticated local

3.5
CVE-2024-42208

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive in

4.4
CVE-2024-13898

The Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website pl

7.2
CVE-2024-13708

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in ve

9.8
CVE-2024-13645

The tagDiv Composer plugin for WordPress is vulnerable to PHP Object Instantiation in all versions up to, and including,

6.3
CVE-2025-3210

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected

6.3
CVE-2025-3209

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affec

6.3
CVE-2025-3208

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Aff

7.3
CVE-2025-3197

Versions of the package expand-object from 0.0.0 are vulnerable to Prototype Pollution in the expand() function in index

7.5
CVE-2025-3194

Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attacke

8.2
CVE-2025-3192

Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery (SSRF) in the setUrl

6.1
CVE-2025-3191

All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting (XSS) via the Embedded button whi

8.8
CVE-2025-2075

The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to

8.1
CVE-2024-13744

The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valida

6.3
CVE-2025-3207

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue a

6.3
CVE-2025-3206

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. This vulnerab

6.3
CVE-2025-3205

A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an un

6.3
CVE-2025-3204

A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this i

4.3
CVE-2025-3203

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the func

7.3
CVE-2025-3202

A vulnerability classified as critical has been found in ageerle ruoyi-ai up to 2.0.0. Affected is an unknown function o

7.3
CVE-2025-3199

A vulnerability was found in ageerle ruoyi-ai up to 2.0.1 and classified as critical. Affected by this issue is some unk

3.3
CVE-2025-3198

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability i

5.3
CVE-2025-3196

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the

7.3
CVE-2025-3195

A vulnerability, which was classified as critical, has been found in itsourcecode Online Blood Bank Management System 1.

6.5
CVE-2025-26401

Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authen

5.8
CVE-2025-25061

Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, whi

5.3
CVE-2025-24317

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, whi

4.3
CVE-2025-24310

Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote

7.3
CVE-2025-3188

A vulnerability classified as critical has been found in PHPGurukul e-Diary Management System 1.0. This affects an unkno

7.3
CVE-2025-3187

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this i

7.6
CVE-2025-29815

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

4.7
CVE-2025-29796

User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker

4.3
CVE-2025-25001

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)

8.8
CVE-2025-25000

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

7.3
CVE-2025-3186

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been declared as critica

7.3
CVE-2025-3185

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been classified as criti

7.3
CVE-2025-3184

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This

7.3
CVE-2025-3183

A vulnerability has been found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical.

7.3
CVE-2025-3182

A vulnerability, which was classified as critical, was found in projectworlds Online Doctor Appointment Booking System 1

7.3
CVE-2025-3181

A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking Sys

7.4
CVE-2025-30370

jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Gi

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.