The archive.

CVE-2025-29045 · mitre

Buffer Overflow vulnerability in ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the newap_text_0 key value

CVE-2025-29046 · mitre

Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the G…

CVE-2025-29047 · mitre

Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the h…

CVE-2025-29209 · mitre

TOTOLINK X18 v9.1.0cu.2024_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub_41105C function…

CVE-2025-28229 · mitre

Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Ad…

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-53591 · mitre

An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-29662 · mitre

A RCE vulnerability in the core application in LandChat 3.25.12.18 allows an unauthenticated attacker to execute system code via remote n…

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-29643 · mitre

An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.

EPSS 0.6%public exploit CVSS 9.1

CVE-2025-28230 · mitre

Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials.

EPSS 0.6%public exploit CVSS 9.1

CVE-2025-28232 · mitre

Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without…

EPSS 0.6%public exploit CVSS 9.1

CVE-2025-28236 · mitre

Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmwar…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-28238 · mitre

Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a sessi…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-28231 · mitre

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administ…

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-28233 · mitre

Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Softwar…

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-29058 · mitre

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component.

EPSS 0.8%CVSS 9.8

CVE-2025-28197 · mitre

Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.

EPSS 0.4%CVSS 9.1

termel1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2025-32583 · termel PDF 2 Post

WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability

EPSS 20%CVSS 9.9

PCMan1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-3762 · PCMan FTP Server

PCMan FTP Server MPUT Command buffer overflow

EPSS 0.8%CVSS 9.8

Climax Themes1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-32572 · Climax Themes Kata Plus

WordPress Kata Plus Plugin <= 1.5.3 - PHP Object Injection vulnerability

JetBrains1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-43012 · JetBrains Toolbox App

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible

saoshyant19941 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-27286 · saoshyant1994 Saoshyant Slider

WordPress Saoshyant Slider Plugin <= 3.0 - PHP Object Injection vulnerability

ssvadim1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-27287 · ssvadim SS Quiz

WordPress SS Quiz Plugin <= 2.0.5 - PHP Object Injection vulnerability

Mahmudul Hasan Arif1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-39551 · Mahmudul Hasan Arif FluentBoards

WordPress FluentBoards plugin <= 1.47 - PHP Object Injection Vulnerability

Quentn.com GmbH2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-39596 · Quentn.com GmbH Quentn WP

WordPress Quentn WP plugin <= 1.2.8 - Privilege Escalation Vulnerability

CVE-2025-39595 · Quentn.com GmbH Quentn WP

WordPress Quentn WP plugin <= 1.2.8 - SQL Injection Vulnerability

rockgod1001 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-27282 · rockgod100 Theme File Duplicator

WordPress Theme File Duplicator Plugin <= 1.3 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

RomanCode1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-32682 · RomanCode MapSVG

WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability

EPSS 0.6%CVSS 9.9

videowhisper1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-31380 · videowhisper Paid Videochat Turnkey Site

WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability

wpWax1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-32658 · wpWax HelpGent

WordPress HelpGent plugin <= 2.2.5 - PHP Object Injection vulnerability

aidraw1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-39436 · aidraw I Draw

WordPress I Draw <= 1.0 - Arbitrary File Upload Vulnerability

EPSS 0.7%CVSS 9.1

bdthemes1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-39588 · bdthemes Ultimate Store Kit Elementor Addons

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerability

JoomSky2 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-32626 · JoomSky JS Job Manager

WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability

CVE-2025-32660 · JoomSky JS Job Manager

WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

Shahjahan Jewel1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-39550 · Shahjahan Jewel FluentCommunity

WordPress FluentCommunity plugin <= 1.2.15 - PHP Object Injection Vulnerability

solacewp1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-32652 · solacewp Solace Extra

WordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

SUNNET Technology Co., Ltd.1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-31340 · SUNNET Technology Co., Ltd. Wisdom Master Pro

Wisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP Program

EPSS 0.5%CVSS 9.9

Ays Pro1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-24577 · Ays Pro Poll Maker

WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

EPSS 0.4%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-2947 · IBM i

IBM i privilege escalation

Projectopia1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-32648 · Projectopia Projectopia

WordPress Projectopia plugin <= 5.1.24 - Privilege Escalation vulnerability

Caio Web Dev1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-22655 · Caio Web Dev CWD – Stealth Links

WordPress CWD - Stealth Links plugin <= 1.3 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

Claudio Adrian Marrero1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-27302 · Claudio Adrian Marrero CHATLIVE

WordPress CHATLIVE plugin <= 2.0.1 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

matthewrubin1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-32636 · matthewrubin Local Magic

WordPress Local Magic plugin <= 2.9.0 - SQL Injection vulnerability

Stylemix1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-39587 · Stylemix Cost Calculator Builder

WordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection Vulnerability

WebbyTemplate1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-32665 · WebbyTemplate Office Locator

WordPress Office Locator plugin <= 1.3.0 - SQL Injection vulnerability