CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- sktthemes skt blocks, sonalsinha21 skt blocks – gutenberg based page builder +1 moreSKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- shopsiteShopSite <= 1.5.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- dsgvo-for-wp dsgvo all in one for wpDSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion6.5 Medium
- smub wpforms – easy form builder for wordpress – contact forms, payment forms, surveys, & more, wpforms +1 moreWPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter6.4 Medium
- smci mbd-x12dpg-oa6fld->used_bytes without sanity check causes stack overflow7.2 High
- smci mbd-x12dpg-oa6fld->used_bytes without sanity check causes stack overflow7.2 High
- smci mbd-x12dpg-oa6SMC BMC Firmware Image Authentication Design Issue7.2 High
- samsung android, samsung mobile devices +1 moreImproper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local...6.0 Medium
- samsung mobile devicesImproper Export of Android Application Components in Settings prior to SMR Feb-2025 Release 1...5.5 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local...6.3 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged...6.3 Medium
- admiror-design-studio admiror gallery, www.admiror-design-studio.com admiror gallery component for joomla +1 moreExtension - admiror-design-studio.com - Path traversal in the Admiror Gallery 4.x component for Joomla7.5 High
- bplugins bslider – create responsive image, post, product, and video slidersB Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode4.3 Medium
- nicheaddons medical addon for elementorMedical Addon for Elementor <= 1.6.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode4.3 Medium
- regularlabs sourcerer, regularlabs.com sourcerer for joomla +1 moreExtension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions < 12.0.0 for Joomla9.8 Critical
- samsung mobile media controllerImproper access control in Media Controller prior to version 1.0.24.5282 allows local attacker to...5.1 Medium
- samsung blockchain keystoreOut-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged...4.4 Medium
- samsung blockchain keystoreOut-of-bounds write in Blockchain Keystore prior to version 1.3.16.5 allows local privileged...6.3 Medium
- samsung mobile pushnotificationImproper access control in PushNotification prior to version 13.0.00.15 in Android 12, 14.0.00.7...4.0 Medium
- samsung membersImproper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers...4.6 Medium
- samsung mobile secure folderImproper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in...6.8 Medium
- samsung easysetupUse of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows...4.0 Medium
- samsung galaxy storeAuthentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows...3.2 Low
- samsung emailImproper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to...4.6 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local...5.1 Medium
- samsung android, samsung mobile devices +1 moreProtection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical...5.9 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to...5.3 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1...7.0 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan...5.3 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025...7.0 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025...5.3 Medium
- samsung android, samsung mobile devices +1 moreInclusion of sensitive information in test code in softsim TA prior to SMR Jan-2025 Release 1...4.1 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in softsim TA prior to SMR Jan-2025 Release 1 allows local privileged...6.4 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in Samsung Message prior to SMR Jan-2025 Release 1 allows physical...4.6 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in SoundPicker prior to SMR Jan-2025 Release 1 allows physical attackers...4.6 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan...7.0 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to...7.0 High
- rabilal js help desk – ai-powered support & ticketing systemJS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css6.4 Medium
- automattic sensei lmsSensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure5.3 Medium
- karacsi maci banner garden, unknown banner garden plugin for wordpress +1 moreBanner Garden Plugin for WordPress <= 0.1.3 - Reflected XSS6.1 Medium
- kwmsources transfinanzTransFinanz <= 1.0.0 - Reflected XSS6.1 Medium
- neoloki wp dream carouselWP Dream Carousel <= 1.0.1b - Reflected XSS6.1 Medium
- canaveralstudio justrows freeJustrows Free <= 0.2 - Reflected XSS7.1 High
- solidresSolidres <= 0.9.4 - Reflected XSS7.1 High
- tanng giga messengerGiga Messenger Bots <= 2.3.1 - Reflected XSS6.1 Medium
- unknown musicboxMusicbox <= 2.0.3 - Reflected XSS6.1 Medium
- ibuildappiBuildApp <= 0.2.0 - Reflected XSS6.1 Medium
- croberts glossyGlossy <= 2.3.5 - Reflected XSS6.1 Medium
- phptechie wp projects portfolio with client testimonialsWP Projects Portfolio with Client Testimonials <= 3.0 - Stored XSS via CSRF6.1 Medium
- Show moreLoading…