CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- zopefoundation restrictedpythontry/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter7.9 High
- xerox workplace suiteArbitrary file upload, deletion and read through header manipulation7.6 High
- xerox workplace suiteAPI Security bypass through header manipulation7.5 High
- ecovacs cloud service, home +1 moreECOVACS lawnmower and vacuum cloud service live video PIN bypass6.0 Medium
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers cleartext storage of anti-theft PIN4.8 Medium
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers and vacuums static BLE GATT encryption key5.3 Medium
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers and vacuums deterministic root password7.0 High
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers and vacuums deterministic firmware encryption key7.7 High
- ecovacs deebot t10, deebot t10 omni, deebot t10 plus +37 more +39 moreECOVACS lawnmowers and vacuums do not properly validate TLS certificates9.5 Critical
- ecovacs homeECOVACS HOME mobile app plugins do not properly validate TLS certificates9.5 Critical
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers and vacuums insecurely store audio warning files1.8 Low
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, openshift container platform 4 +2 moreOvn: egress acls may be bypassed via specially crafted udp packet8.1 High
- ecovacs deebot t30 omni, deebot t30s, deebot x2 omni +21 more +23 moreECOVACS robot lawnmowers and vacuums command injection5.8 Medium
- basteln3rk save & import image from urlWordPress Save & Import Image from URL Plugin <= 0.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tatsuya wp-flickr-pressWordPress wp-flickr-press Plugin <= 2.6.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- suryabhan custom coming soonWordPress Custom Coming Soon Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jmraya legal +WordPress Legal + Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound links/problem reporterWordPress Links/Problem Reporter plugin <= 2.6.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sayocode sc simple zazzleWordPress SC Simple Zazzle plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- flx0 flx dashboard groupsWordPress FLX Dashboard Groups plugin <= 0.0.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fures xtra settingsWordPress XTRA Settings plugin <= 2.1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- antonzaroutski az content finderWordPress AZ Content Finder plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pshikli accessibility task managerWordPress Accessibility Task Manager plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- oleksandr ustymenko university quizzes onlineWordPress University Quizzes Online plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hdw player plestar directory listing, plestar inc directory listing +1 moreWordPress Plestar Directory Listing plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mind3dom ryebread widgets, notfound mind3dom ryebread widgets +1 moreWordPress Mind3doM RyeBread Widgets plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dimitar a. my favorite carWordPress My Favorite Car plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- codehandling youtube video gridWordPress Youtube Video Grid plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- subhasis laha gallerioWordPress Gallerio plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- new media one geodigsWordPress GeoDigs plugin <= 3.4.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fukushima kumihimoWordPress Kumihimo plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- alessandro benoit wpdevtoolWordPress WpDevTool plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- navnish bhardwaj wp social broadcastWordPress WP Social Broadcast plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- heart5 statpresscnWordPress StatPressCN plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- edmon download, downloadsWordPress Download, Downloads plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- jinhan park rocket media library mime typeWordPress Rocket Media Library Mime Type plugin <= 2.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- patel wp query creatorWordPress WP Query Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- beta10Inadequate access control in Beta109.8 Critical
- hellomohsinkhan wp front-end login and registerWordPress WP Front-end login and register plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- uyumsoft informatin systems erpReflected XSS in Uyumsoft's ERP5.5 Medium
- sonicwall sma1000, sma1000 appliances, sma6200 firmware +7 more +9 morePre-authentication deserialization of untrusted data vulnerability has been identified in the...9.8 Critical
- pluginus meta data and taxonomies filter, realmag777 mdtf – meta data and taxonomies filter +1 moreMDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- cliptakesCliptakes <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- stellarwp the events calendarThe Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- suhas93 seo blogger to wordpress migration using 301 redirection, seo blogger to wordpress 301 redirector +1 moreSEO Blogger to WordPress Migration using 301 Redirection <= 0.4.8 - Reflected Cross-Site Scripting6.1 Medium
- tainacanTainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection6.5 Medium
- videowhisper broadcast live video – live streaming : webrtc, hls, rtsp, rtmp, live streaming integration +1 moreBroadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- woobewoo product table, product table for woocommerce by wbw +1 moreProduct Table by WBW <= 2.1.2 - Unuthenticated SQL Injection7.5 High
- bdthemes prime slider – addons for elementor, prime slider +1 morePrime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- m-files serverDenial of Service condition in M-Files Server6.3 Medium
- Show moreLoading…