The archive.

CVE-2024-57155 · mitre

Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token.

CVE-2025-50901 · mitre

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerability, which can lead to ar…

CVE-2025-50904 · mitre

There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11).

CVE-2024-45438 · mitre

An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8.01.x before 8.01.14.

EPSS 0.6%public exploit CVSS 9.1

CVE-2024-50640 · mitre

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function

CVE-2025-52352 · mitre

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 provides a configuration to disable user sign-up in distributed deployments by hid…

CVE-2025-52395 · mitre

An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password reset API endpoin…

CVE-2024-57157 · mitre

Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token.

harborist2 vulnerabilities on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2025-9288 · harborist

Missing type checks leading to hash rewind and passing on crafted data

EPSS 0.8%public exploit CVSS 9.1

CVE-2025-9287 · harborist

Missing type checks leading to hash rewind and passing on crafted data

EPSS 0.6%public exploit CVSS 9.1

StoreKeeper B.V.1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2025-48148 · StoreKeeper B.V. StoreKeeper for WooCommerce

WordPress StoreKeeper for WooCommerce Plugin <= 14.4.4 - Arbitrary File Upload Vulnerability

EPSS 18%CVSS 10.0

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-9156 · itsourcecode Sports Management System

itsourcecode Sports Management System sports.php sql injection

Tenda4 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-27129 · Tenda AC6 V5.0

An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110.

EPSS 2%CVSS 9.8

CVE-2025-32010 · Tenda AC6 V5.0

A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110.

EPSS 0.8%CVSS 9.8

CVE-2025-24322 · Tenda AC6 V5.0

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110.

CVE-2025-31355 · Tenda AC6 V5.0

A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110.

EPSS 0.3%CVSS 9.8

directus1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2025-55746 · directus directus

Directus allows unauthenticated file upload and file modification due to lacking input sanitization

EPSS 2%CVSS 9.3

Miguel Useche1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2025-54726 · Miguel Useche JS Archive List

WordPress JS Archive List Plugin < 6.1.6 - SQL Injection Vulnerability

EPSS 2%CVSS 9.3

AOMEI2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-8610 · AOMEI Cyber Backup

AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability

EPSS 0.7%CVSS 9.8

CVE-2025-8611 · AOMEI Cyber Backup

AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability

EPSS 0.7%CVSS 9.8

magepeopleteam1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-54713 · magepeopleteam Taxi Booking Manager for WooCommerce

WordPress Taxi Booking Manager for WooCommerce plugin <= 1.3.0 - Broken Authentication vulnerability

Mozilla6 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-9179 · Mozilla Firefox

Sandbox escape due to invalid pointer in the Audio/Video: GMP component

EPSS 0.7%CVSS 9.8

CVE-2025-54143 · Mozilla Firefox for iOS

Sandboxed iframes could allow local downloads despite sandbox restrictions

CVE-2025-8042 · Mozilla Firefox

Sandboxed iframe could start downloads

CVE-2025-9187 · Mozilla Firefox

Memory safety bugs fixed in Firefox 142 and Thunderbird 142

CVE-2025-55031 · Mozilla Firefox for iOS

Passkey phishing within Bluetooth range

CVE-2025-54145 · Mozilla Firefox for iOS

Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites

EPSS 0.4%CVSS 9.1

axiomthemes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-49434 · axiomthemes Cars4Rent

WordPress Cars4Rent Theme <= 1.4.2 - PHP Object Injection Vulnerability

Imran Emu1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-49410 · Imran Emu TC Testimonials

WordPress TC Testimonials plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

EPSS 0.5%CVSS 10.0

ThemeMakers1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-53299 · ThemeMakers ThemeMakers Visual Content Composer

WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability

ThemeREX1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-49890 · ThemeREX Organic Beauty

WordPress Organic Beauty Theme <= 1.4.6 - PHP Object Injection Vulnerability

WPDeveloper1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-49408 · WPDeveloper Templately

WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability

EPSS 0.5%CVSS 10.0

brewlabs1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-49409 · brewlabs SensorPress

WordPress SensorPress plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Jordy Meow1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-48169 · Jordy Meow Code Engine

WordPress Code Engine Plugin <= 0.3.3 - Remote Code Execution (RCE) Vulnerability

EPSS 0.5%CVSS 9.9

miniOrange2 vulnerabilities on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-54049 · miniOrange Custom API for WP

WordPress Custom API for WP <= 4.2.2 - Privilege Escalation Vulnerability

EPSS 0.5%CVSS 9.9

CVE-2025-54048 · miniOrange Custom API for WP

WordPress Custom API for WP <= 4.2.2 - SQL Injection Vulnerability

EPSS 0.5%CVSS 9.3

osama.esh1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-49400 · osama.esh WP Visitor Statistics (Real Time Traffic)

WordPress WP Visitor Statistics (Real Time Traffic) Plugin <= 8.2 - Cross Site Scripting (XSS) Vulnerability

themepassion1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-49422 · themepassion Support Ticket

WordPress Support Ticket Plugin <= 1.9 - Privilege Escalation Vulnerability