CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- brandtoss wp mailsterWordPress WP Mailster plugin <= 1.8.15.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- plainware plaininventoryWordPress PlainInventory plugin <= 3.1.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dualcube moowoodleWordPress MooWoodle plugin <= 3.2.4 - Sensitive Data Exposure vulnerability7.5 High
- bannersky bsk forms validationWordPress BSK Forms Validation plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- alexandros georgiou bitcoin and altcoin walletsWordPress Bitcoin and Altcoin Wallets plugin <= 6.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dinamiko dk white labelWordPress DK White Label plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- thrivedeskWordPress ThriveDesk plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound locketsWordPress Lockets Plugin <= 0.999 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- applicantproWordPress ApplicantPro Plugin <= 1.3.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- marco milesi wp cloudWordPress WP Cloud plugin <= 1.4.3 - Arbitrary File Deletion vulnerability7.5 High
- .tube gtld video curator, tubegtld .tube video curator +1 moreWordPress .TUBE Video Curator Plugin <= 1.1.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound pafacileWordPress PAFacile plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nitesh awesome timelineWordPress Awesome Timeline plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- notfound romancartWordPress RomanCart On WordPress plugin <= 0.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nik sudan wordpress additional loginsWordPress WordPress Additional Logins plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- aarvansh infotech emarksheetWordPress eMarksheet plugin <= 5.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- uzzal mondal google map with fancyboxWordPress Google Map With Fancybox plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kvvaradha emailpressWordPress EmailPress plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- blu logistics pte. ltd. logistics, blulogistics1 blu logistics +1 moreWordPress blu Logistics plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- burtay arat dezdyWordPress Dezdy plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- baonguyenyam wow best css compiler, wow wordpress best css compiler +1 moreWordPress WOW Best CSS Compiler plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- haider ali bulk categories assignWordPress Bulk Categories Assign plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- digital zoom studio demo user dzsWordPress Demo User DZS plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- notfound mll audio player mp3 ajaxWordPress MLL Audio Player MP3 Ajax plugin <= 0.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hemnath mouli wc walletWordPress WC Wallet plugin <= 2.2.0 - Arbitrary Content Deletion vulnerability6.5 Medium
- notfound wpjobboardWordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- vikash srivastava vstemplate creatorWordPress VSTEMPLATE Creator plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver can cause the whole system to become unresponsive6.1 Medium
kubevirtSUSESecurity update for kubevirtNo scoreselinux-policySUSESecurity update for selinux-policyNo scoreca-certificates-mozillaSUSESecurity update for ca-certificates-mozillaNo score- zephyrproject zephyrnet: lib: http_server: Buffer Under-read8.6 High
- notfound essential wp real estateEssential WP Real Estate <= 1.1.3 - Reflected XSS6.8 Medium
- google android, linuxfoundation yocto, mediatek software development kit +2 more +4 moreIn Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This...5.3 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 moreIn DA, there is a possible out of bounds read due to a missing bounds check. This could lead to...3.9 Low
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 moreIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.6 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 moreIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.6 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 moreIn DA, there is a possible out of bounds read due to a missing bounds check. This could lead to...4.3 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 moreIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.6 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 moreIn DA, there is a possible read of uninitialized heap data due to uninitialized data. This could...4.3 Medium
- mediatek software development kit, mediatek, inc. mt7981, mt7986 +1 moreIn network HW, there is a possible system hang due to an uncaught exception. This could lead to...7.5 High
- mediatek software development kit, mediatek, inc. mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986 +1 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...7.8 High
- mediatek software development kit, mediatek, inc. mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986 +1 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...7.8 High
- mediatek software development kit, mediatek, inc. mt7603, mt7615, mt7622, mt7915 +1 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...8.8 High
- maxd lightning moduleMaxD Lightning Module deserialization2.3 Low
- cmseasyCmsEasy index.php backAll_action path traversal5.3 Medium
libssh2OSS-FuzzNull-dereference READ in ubsan_GetStackTraceNo score- zenvia movideskZenvia Movidesk New Ticket cross site scripting5.3 Medium
- advantive veracoreA SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows...5.8 Medium
- ntop ndpinDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in...8.1 High
- Show moreLoading…