The archive.

Fujian1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-5107 · Fujian Kelixun

Fujian Kelixun xml_cdr_details.php sql injection

EPSS 0.5%public exploit CVSS 9.8

MSP3601 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-43596 · MSP360 Backup

MSP360 Backup (for Windows) insecure filesystem permissions

EPSS 0.4%public exploit CVSS 9.8

zongzhige1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-5108 · zongzhige ShopXO

zongzhige ShopXO ZIP File Payment.php Upload unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

FreeFloat1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-5076 · FreeFloat FTP Server

FreeFloat FTP Server SEND Command buffer overflow

EPSS 0.8%CVSS 9.8

WSO21 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-6914 · WSO2 WSO2 API Manager

Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover

EPSS 0.8%CVSS 9.8

WPFable2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-46468 · WPFable Fable Extra

WordPress Fable Extra plugin <= 1.0.6 - Local File Inclusion Vulnerability

CVE-2025-46539 · WPFable Fable Extra

WordPress Fable Extra plugin <= 1.0.6 - SQL Injection Vulnerability

wpjobportal1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-47438 · wpjobportal WP Job Portal

WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability

EPSS 0.7%CVSS 9.8

Xylus Themes1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-47453 · Xylus Themes WP Smart Import

WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability

EPSS 0.7%CVSS 9.8

GoodLayers4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-39500 · GoodLayers Goodlayers Hostel

WordPress Goodlayers Hostel Plugin <= 3.1.2 - PHP Object Injection vulnerability

CVE-2025-39503 · GoodLayers Goodlayers Hotel

WordPress Goodlayers Hotel plugin <= 3.1.4 - PHP Object Injection vulnerability

CVE-2025-39501 · GoodLayers Goodlayers Hostel

WordPress Goodlayers Hostel plugin <= 3.1.4 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

CVE-2025-39504 · GoodLayers Goodlayers Hotel

WordPress Goodlayers Hotel plugin <= 3.1.4 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

Tridium3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-3945 · Tridium Niagara Framework

Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)

CVE-2025-3941 · Tridium Niagara Framework

Improper Handling of Windows: DATA Alternate Data Stream

CVE-2025-3944 · Tridium Niagara Framework

Incorrect Permission Assignment for Critical Resource

wordwebsoftware1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-46490 · wordwebsoftware Crossword Compiler Puzzles

WordPress Crossword Compiler Puzzles plugin <= 5.2 - Arbitrary File Upload Vulnerability

EPSS 0.5%CVSS 9.9

Ajar Productions1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-47642 · Ajar Productions Ajar in5 Embed

WordPress Ajar in5 Embed plugin <= 3.1.5 - Arbitrary File Upload Vulnerability

EPSS 0.4%CVSS 10.0

AncoraThemes1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-48289 · AncoraThemes Kids Planet

WordPress Kids Planet theme <= 2.2.14 - PHP Object Injection Vulnerability

CoinPayments1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-47532 · CoinPayments CoinPayments.net Payment Gateway for WooCommerce

WordPress CoinPayments.net Payment Gateway for WooCommerce plugin <= 1.0.17 - PHP Object Injection Vulnerability

Pagaleve1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-48287 · Pagaleve Pix 4x sem juros - Pagaleve

WordPress Pix 4x sem juros - Pagaleve plugin <= 1.6.9 - PHP Object Injection Vulnerability

printcart2 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-47641 · printcart Printcart Web to Print Product Designer for WooCommerce

WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.3.9 - Arbitrary File Upload Vulnerability

EPSS 0.4%CVSS 10.0

CVE-2025-47640 · printcart Printcart Web to Print Product Designer for WooCommerce

WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability

STAGGS1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-47637 · STAGGS STAGGS

WordPress STAGGS plugin <= 2.11.0 - Arbitrary File Upload Vulnerability

EPSS 0.5%CVSS 10.0

StoreKeeper B.V.1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-47687 · StoreKeeper B.V. StoreKeeper for WooCommerce

WordPress StoreKeeper for WooCommerce plugin <= 14.4.4 - Arbitrary File Upload Vulnerability

EPSS 0.5%CVSS 10.0

WPFunnels1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-47530 · WPFunnels WPFunnels

WordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection Vulnerability

ZoomIt1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-47568 · ZoomIt ZoomSounds

WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability

ELEXtensions1 vulnerability on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2025-47658 · ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System

WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.9

mojoomla1 vulnerability on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2025-47663 · mojoomla Hospital Management System

WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.9

ABB5 vulnerabilities on this pageMax CVSS 9.5Priority 36KEV 0

CVE-2025-2410 · ABB ASPECT-Enterprise

Admin Authorized Port (iptables) manipulation (open/close/disable ports)

EPSS 0.5%CVSS 9.1

CVE-2024-13955 · ABB ASPECT-Enterprise

SQL Injection 2nd Order

EPSS 0.4%CVSS 9.4

CVE-2024-48853 · ABB ASPECT-Enterprise

Authenticated Escalation to guest to root

EPSS 0.4%CVSS 9.5

CVE-2025-2409 · ABB ASPECT-Enterprise

Admin Authorized System File corruption

EPSS 0.5%CVSS 9.1

CVE-2025-30171 · ABB ASPECT-Enterprise

Admin Authorized System File Deletion

EPSS 0.3%CVSS 9.0

Detheme1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-46460 · Detheme Easy Guide

WordPress Easy Guide plugin <= 1.0.0 - SQL Injection Vulnerability

IndigoThemes1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-46455 · IndigoThemes WP HRM LITE

WordPress WP HRM LITE plugin <= 1.1 - SQL Injection Vulnerability

Jan Syski1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-3895 · Jan Syski MegaBIP

Low token entropy in MegaBIP

EPSS 0.5%CVSS 9.1

facturante1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-47599 · facturante Facturante

WordPress Facturante plugin <= 1.11 - SQL Injection Vulnerability

Majestic Support1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-48283 · Majestic Support Majestic Support

WordPress Majestic Support plugin <= 1.1.0 - SQL Injection Vulnerability