The archive.

CVE-2025-62630 · Advantech DeviceOn/iEdge

Advantech DeviceOn/iEdge Path Traversal

CVE-2022-50591 · Advantech iView

Advantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information Disclosure

CVE-2022-50592 · Advantech iView

Advantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCE

EPSS 0.7%CVSS 9.3

CVE-2022-50595 · Advantech iView

Advantech iView < v5.7.04 Build 6425 ztp_search_value Parameter SQL Injection RCE

EPSS 0.7%CVSS 9.3

mykiot1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-12674 · mykiot KiotViet Sync

KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload

EPSS 0.8%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-27918 · mitre

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for…

oobabooga2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-12487 · oobabooga text-generation-webui

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

CVE-2025-12488 · oobabooga text-generation-webui

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

SuiteCRM1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-50589 · SuiteCRM SuiteCRM

SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality

Fetch Designs1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-49393 · Fetch Designs Sign-up Sheets

WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability

EPSS 0.6%CVSS 9.8

Addify1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-60207 · Addify Custom User Registration Fields for WooCommerce

WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability

borisolhor1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-53283 · borisolhor Drop Uploader for CF7 - Drag&Drop File Uploader Addon

WordPress Drop Uploader for CF7 - Drag&Drop File Uploader Addon Plugin <= 2.4.1 - Arbitrary File Upload Vulnerability

Case-Themes1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-62047 · Case-Themes Case Addons

WordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.9

Cristián Lávaque1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-58998 · Cristián Lávaque s2Member

WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability

CRM Perks1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-58636 · CRM Perks WP Gravity Forms Keap/Infusionsoft

WordPress WP Gravity Forms Keap/Infusionsoft Plugin <= 1.2.3 - Deserialization of untrusted data Vulnerability

KingAddons.com2 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-6327 · KingAddons.com King Addons for Elementor

WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 10.0

CVE-2025-6325 · KingAddons.com King Addons for Elementor

WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability

Plugify1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-60235 · Plugify Support Ticket System for WooCommerce (Premium)

WordPress Support Ticket System for WooCommerce plugin <= 2.0.7 - Arbitrary File Upload vulnerability

VictorThemes1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-53242 · VictorThemes Seil

WordPress Seil Theme <= 1.7.1 - Deserialization of untrusted data Vulnerability

VillaTheme1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-49372 · VillaTheme HAPPY

WordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerability

Widgetlogic.org1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-32222 · Widgetlogic.org Widget Logic

WordPress Widget Logic <= 6.0.5 - Remote Code Execution (RCE) Vulnerability

EPSS 0.5%CVSS 9.9

WP User Manager1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-60245 · WP User Manager WP User Manager

WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability

Elated-Themes1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-62064 · Elated-Themes Search & Go

WordPress Search & Go theme <= 2.7 - Broken Authentication vulnerability

hogash1 vulnerability on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2025-62016 · hogash KALLYAS

WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.9

Holest Engineering1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-60243 · Holest Engineering Selling Commander for WooCommerce

WordPress Selling Commander for WooCommerce plugin <= 1.2.46 - Privilege Escalation vulnerability

kamleshyadav1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-58627 · kamleshyadav Miraculous Core Plugin

WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability

Vito Peleg1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-60195 · Vito Peleg Atarim

WordPress Atarim plugin <= 4.2.1 - Privilege Escalation vulnerability