CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- duogeek simple amazon affiliateSimple Amazon Affiliate <= 1.0.9 - Reflected Cross-Site Scripting6.1 Medium
- gnarf binlayerpressbinlayerpress <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- themeum wp crowdfundingWP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download5.3 Medium
- mooveagency gdpr cookie compliance, gdpr cookie compliance – cookie banner, cookie consent, cookie notice for ccpa, eu cookie law +1 moreGDPR Cookie Compliance <= 4.15.6 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- odyssey cms, odysseyautomation odyssey cms +1 moreOdyssey CMS reCAPTCHA odyssey_contact_form.php key management4.8 Medium
- lovecards, lovecards lovecardsv2 +1 moreLoveCards LoveCardsV2 image unrestricted upload6.9 Medium
- lovecards, lovecards lovecardsv2 +1 moreLoveCards LoveCardsV2 Setting other access control6.9 Medium
- zzskzy warehouse refinement management systemzzskzy Warehouse Refinement Management System getAdyData.ashx ProcessRequest sql injection5.3 Medium
- zzskzy warehouse refinement management systemzzskzy Warehouse Refinement Management System SaveCrash.ashx UploadCrash unrestricted upload5.3 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site...5.4 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Reflected Cross...5.4 Medium
- jonschlinkert parse-git-configPrototype Pollution Vulnerability in parse-git-config7.5 High
- open5gsAn issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a...6.5 Medium
- No product listedAn issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via...8.8 High
- No product listedAn issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via...7.5 High
- No product listedAlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF...5.6 Medium
- softether vpnSoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the...9.8 Critical
- softether vpnSoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the...9.8 Critical
- softether vpnMemory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of...5.6 Medium
- softether vpnSoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert...9.8 Critical
- kohaKoha <= 21.11 is contains a SQL Injection vulnerability in /serials/lateissues-export.pl via the...10.0 Critical
- bmc remedy mid-tierAn issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML...4.2 Medium
basicsrPyPIXPixelGroup BasicSR Command Injection5.3 Medium- No product listedDoufox s=doudou path traversal5.1 Medium
- microweberMicroweber Settings index.php cross site scripting5.1 Medium
- castlenet cbw383g2n, cbw383g2n firmware +1 moreCastlenet CBW383G2N Wireless Menu wlanPrimaryNetwork.asp cross site scripting4.8 Medium
- castlenet cbw383g2n, cbw383g2n firmware +1 moreCastlenet CBW383G2N RgSwInfo.asp cross site scripting4.8 Medium
- samsung smartthingsSamsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability8.8 High
- aitangbao springboot-manageraitangbao springboot-manager add cross site scripting4.8 Medium
- aitangbao springboot-manageraitangbao springboot-manager add cross site scripting4.8 Medium
github.com/cheqd/cheqd-nodeGocheqd-node affected by Non-deterministic JSON Unmarshalling of IBC Acknowledgement9.3 Critical- obiba opalOpal vulnerable to CSRF protection bypass7.7 High
- obiba opalBroken Access Control in Opal filesystem's copy functionality exposes all user data7.3 High
- aitangbao springboot-manageraitangbao springboot-manager add cross site scripting4.8 Medium
- techlabpro1 review schema – review & structure data schema pluginReview Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta8.8 High
- condenast ziplist recipe, ziplist recipe +1 moreWordPress ZipList Recipe plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- mylo2h2s dp alterminator - missing alt managerWordPress DP ALTerminator - Missing ALT manager Plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ohtan spam byebyeWordPress SPAM-BYBYE Plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- arkapravamajumder back to topWordPress Back To Top Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- bjoern wp performance packWordPress WP Performance Pack plugin <= 2.5.3 - Broken Access Control vulnerability4.3 Medium
- lavacode lava ajax searchWordPress Lava Ajax Search plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- sakurapixel lunarWordPress Lunar plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- maxfoundry maxa/bWordPress MaxA/B plugin <= 2.2.2 - CSRF to Stored XSS vulnerability7.1 High
- bcs website solutions insert codeWordPress Insert Code plugin <= 2.4 - CSRF to Stored XSS vulnerability7.1 High
- devrix hashtagsWordPress WordPress Hashtags plugin <= 0.3.2 - CSRF to Stored XSS vulnerability7.1 High
- rodolphe moulin list mixcloudWordPress List Mixcloud plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vivek marakana tabbed login widgetWordPress Tabbed Login Widget plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- a. chappard display template nameWordPress Display Template Name plugin <= 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- popeating post read timeWordPress Post Read Time plugin <= 1.2.6 - Stored Cross Site Scripting (XSS) vulnerability5.9 Medium
- hieu nguyen wati chat and notificationWordPress WATI Chat and Notification plugin <= 1.1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…