CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- aa web servant 12 step meeting listWordPress 12 Step Meeting List plugin <= 3.16.5 - Arbitrary Content Deletion vulnerability6.5 Medium
- helloassoWordPress HelloAsso plugin <= 1.1.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- brainstorm force starter templatesWordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- subscriptiondna subscription dnaWordPress Subscription DNA plugin <= 2.1 - CSRF to Stored XSS vulnerability7.1 High
- joeybling bootplusJoeyBling bootplus list sql injection5.3 Medium
- joeybling bootplusJoeyBling bootplus list sql injection5.3 Medium
- lmfit astevalASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape8.4 High
- updatecliUpdatecli may expose Maven credentials in console output7.1 High
- coollabs coolifyCoolify Vulnerable to Reflected XSS on Tag Search1.3 Low
- coollabs coolifyCoolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)10.0 Critical
- coollabs coolifyCoolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE)10.0 Critical
- coollabs coolifyCoolify Vulnerable to OAuth Secrets Leak5.7 Medium
- coollabs coolifyCoolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)10.0 Critical
- coollabs coolifyCoolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS)6.5 Medium
- coollabs coolifyCoolify Vulnerable to GitHub / GitLab OAuth Secrets Leak4.7 Medium
- coollabs coolifyCoolify Command Injection Vulnerability in Project Name8.5 High
- ibm maximo asset managementIBM Maximo Asset Management file upload6.5 Medium
- dotstore product size charts plugin for woocommerceWordPress Product Size Charts Plugin for WooCommerce plugin <= 2.4.5 - Broken Access Control vulnerability4.3 Medium
- joeybling bootplusJoeyBling bootplus list sql injection5.3 Medium
- joeybling bootplusJoeyBling bootplus list sql injection5.3 Medium
- ibm planning analytics, planning analytics local +1 moreIBM Planning Analytics file upload8.0 High
- ibm planning analytics, planning analytics local +1 moreIBM Planning Analytics file upload8.0 High
- astoundify jobify, jobify - job board wordpress theme +1 moreJobify - Job Board WordPress Theme <= 4.2.7 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- telstra smart modem gen 2Telstra Smart Modem Gen 2 HTTP Header injection6.9 Medium
- coollabs coolifyCoolify OS Command Injection Vulnerability in SSH Command Generation8.5 High
- silabs.com usbxpress win 98se dev kitUncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer8.6 High
- silabs.com usbxpress sdkUncontrolled search path can lead to DLL hijacking in USBXpress SDK installer8.6 High
- silabs.com usbxpress 4 sdkUncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer8.6 High
- silabs.com usbxpress dev kitUncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer8.6 High
- silabs.com cp210x vcp windowsUncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer8.6 High
- silabs.com cp210 vcp win 2kUncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer8.6 High
- silabs.com toolstickUncontrolled search path can lead to DLL hijacking in ToolStick installer8.6 High
- silabs.com flash programming utilityUncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer8.6 High
- silabs.com configuration wizard 2Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer8.6 High
- silabs.com silicon labs ide (8-bit)Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer8.6 High
- rometheme romethemekit for elementor, rtmkit +1 moreRomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates4.3 Medium
- buddydev activity plus reloaded for buddypressActivity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery5.4 Medium
- ibm cognos dashboards on cloud pak for dataIBM Cognos Dashboards on Cloud Pak for Data privilege escalation8.8 High
- pickplugins post grid, wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget +1 morePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion7.5 High
- agenceseo wp google street view, pagup wp google street view (with 360° virtual tour) & google maps + local seo +1 moreWP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- cyberchimps responsive addons, responsive addons for elementor – free elementor addons, kits and elementor templates +1 moreResponsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- templatescoder spexo addons for elementor, templatescoderthemes spexo addons for elementor – elementor widgets, mega menu, popup builder, template kits and starter templates for elementor +1 moreSastra Essential Addons for Elementor – Free Elementor Addons, Widgets and Templates <= 1.0.14 - Missing Authorization to Spexo Theme Install4.3 Medium
- neofix simple downloads listSimple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection6.5 Medium
- nfusionsolutions precious metals charts and widgets for wordpress, precious metals charts and widgets +1 morePrecious Metals Charts and Widgets for WordPress <= 1.2.8 - Authenticated (Contributor+) Stored Cross-site Scripting6.4 Medium
- wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget, post grid\, slider \& carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()7.5 High
- notfound foogallery captionsWordPress FooGallery Captions Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- grandslambert custom page extensionsWordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- anildhiman mj contact usWordPress MJ Contact us Plugin <= 5.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…