CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System staffview.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System partview.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System incview.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System expview.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System templatedelete.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System typedelete.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System customerview.php sql injection5.3 Medium
- vanquish woocommerce support ticket systemWooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure5.4 Medium
- wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 moreBetter Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System deldoc.php sql injection5.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion5.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download5.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending5.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion4.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion4.3 Medium
- brecht custom related postsCustom Related Posts <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates5.4 Medium
- free5gc udm, ubiquiti inc efg, ucg-max +9 more +11 moreAn Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured,...5.9 Medium
- dcooperman magicformMagicForm - WordPress Form Builder <= 1.6.2 - Missing Authorization6.3 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- techspawn multiloca, multiloca - woocommerce multi locations inventory management +1 moreMultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection6.5 Medium
- apidaze widget4callWidget4call <= 1.0.7 - Reflected XSS5.4 Medium
- megamindstechnologies wordpress email newsletterWP Email Newsletter <= 1.1 - Reflected XSS5.4 Medium
- mch0lic wp financeWP Finance <= 1.3.6 - Reflected XSS5.4 Medium
- mch0lic wp financeWP Finance <= 1.3.6 - Stored XSS via CSRF4.6 Medium
- patrickpelayo responsive iframeResponsive iframe <= 1.2.0 - Contributor+ Stored XSS5.4 Medium
- artbees jupiter x coreJupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)8.8 High
- artbees jupiter x coreJupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read6.5 Medium
- wpwax directorist, directorist: ai-powered business directory, listings & classified ads +1 moreDirectorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure5.3 Medium
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD versions prior to 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain an improper...7.8 High
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path...7.1 High
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer...2.7 Low
- elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 moreELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.8 High
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad – Optimize Web Vitals Automatically <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Limited Setting Reset4.3 Medium
- creativeinteractivemedia animategl animations for wordpress – elementor & gutenberg blocks animations, animategl animations +1 moreAnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations <= 1.4.23 - Missing Authorization to Unauthenticated Settings Update5.3 Medium
- cimatti contact forms by cimatti, wordpress contact forms +1 moreWordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download5.3 Medium
- athemes addons for elementor, smub athemes addons for elementor +1 moreaThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- dsky site search 360Site Search 360 <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- unknown woocommerce customers managerWooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.8 High
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6983, mt6985, mt8321, mt8385, mt8666, mt8667, mt8673, mt8755, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8796, mt8797, mt8798 +1 moreIn secmem, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8370, mt8390 +2 more +4 moreIn V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead...6.6 Medium
- mediatek nr16, nr17, nr17r +1 more +3 moreIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...9.8 Critical
platform/frameworks/baseAndroidIn onCreate of MediaProjectionPermissionActivity.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additi…No scoreplatform/frameworks/baseAndroidIn multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions due to a logic error in the code. This could lead to local escalation of privilege with no add…No scoreplatform/frameworks/baseAndroidIn multiple functions of TaskFragmentOrganizerController.java, there is a possible token leak due to a logic error in the code. This could lead to local escalation of privilege with no additional exec…No scoreplatform/frameworks/baseAndroidIn transferTouchGesture of WindowManagerService.java , there is a possible way to steal sensitive user input due to a logic error in the code. This could lead to local escalation of privilege with no…No scoreplatform/hardware/st/nfcAndroidIn handlePollingLoopData of hal_fwlog.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privilege…No scoreplatform/packages/apps/SettingsAndroidIn AppTimeSpentPresenter of AppTimeSpentPreference.kt, there is a possible way to hijack implicit intent. This could lead to local escalation of privilege with no additional execution privileges neede…No scoreplatform/packages/apps/SettingsAndroidIn onCreateOptionsMenu of UserSettings.java, there is a possible way to remove the work profile by opening a hidden activity due to a logic error in the code. This could lead to local escalation of pr…No scoreplatform/packages/apps/SettingsAndroidIn isSafeIntent of AccountManagerService.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional exec…No score:linux_kernel:AndroidIn multiple functions of mremap.c, there is a possible use-after-free scenario in physical memory due to a race condition. This could lead to local escalation of privilege with no additional execution…No score- Show moreLoading…