CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- unknown aoa-downloadable, osteopathic downloadable by american osteopathic association +1 moreDownloable by American Osteopathic Association <= 0.1.0 - Unauthenticated SSRF7.2 High
- unknown aoa-downloadable, osteopathic downloadable by american osteopathic association +1 moreDownloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download8.6 High
- unknown afi, advancedformintegration advanced form integration +1 moreAFI < 1.100.0 - Admin+ Stored XSS3.5 Low
- unknown afi, advancedformintegration advanced form integration +1 moreAFI < 1.100.0 - Admin+ Stored XSS3.5 Low
- brijeshk89 ip based loginIP Based Login < 2.4.1 - Log Deletion via CSRF4.3 Medium
- simple banner project banner, unknown simple banner +1 moreSimple Banner < 3.0.4 - Admin+ Stored XSS3.5 Low
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System manage-services.php sql injection6.9 Medium
- brijeshk89 smart maintenance modeSmart Maintenance Mode < 1.5.2 - Admin+ Stored XSS6.1 Medium
- unknown product labels for woocommerce (sale badges), acowebs product labels for woocommerce \(sale badges\) +1 moreProduct Labels For Woocommerce < 1.5.9 - Admin+ SQLi4.1 Medium
- shapedplugin wp tabsWP Tabs < 2.2.7 - Admin+ Stored XSS6.1 Medium
- unknown contact form & smtp plugin for wordpress by pirateforms, wpforms contact form +1 moreContact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS6.1 Medium
- unknown contact form & smtp plugin for wordpress by pirateforms, wpforms pirate forms +1 moreContact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS6.1 Medium
- roundupwp registrations for the events calendarRegistrations for The Events Calendar < 2.13.4 - Admin+ Stored XSS6.1 Medium
- expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 moreQuiz and Survey Master (QSM) < 9.2.1 - Author+ Stored XSS6.1 Medium
- unknown product labels for woocommerce (sale badges), acowebs product labels for woocommerce \(sale badges\) +1 moreProduct Labels For Woocommerce < 1.5.11 - Admin+ SQLi4.1 Medium
- 10web slider, unknown slider by 10web +1 moreSlider by 10Web < 1.2.62 - Contributor+ Stored XSS6.1 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System manage-scdetails.php sql injection6.9 Medium
- 10web slider, unknown slider by 10web +1 moreSlider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget6.1 Medium
- 10web form maker, unknown form maker by 10web +1 moreForm Maker by 10Web < 1.15.30 - Admin+ Stored XSS3.5 Low
- internet-formation wp-advanced-search, unknown wordpress wp-advanced-search +1 moreWP-Advanced-Search < 3.3.9.3 - Admin+ Stored XSS3.5 Low
- design stylish price listStylish Price List < 7.1.12 - Contributor+ Stored XSS5.9 Medium
- blueglass jobs for wordpress, unknown job postings +1 moreJobs for WordPress < 2.7.11 - Contributor+ Stored XSS5.9 Medium
- b&r industrial automation gmbh aprolPath traversal in APROL Web Portal8.4 High
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System contactus.php sql injection6.9 Medium
- wpwax directorist: ai-powered business directory, listings & classified adsDirectorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing5.3 Medium
- designthemes core featuresDesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System bwdates-report-details.php sql injection6.9 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System add-services.php sql injection6.9 Medium
- b&r industrial automation gmbh aprolEnabled ICMP redirection in B&R APROL7.2 High
- b&r industrial automation gmbh aprolMissing GRUB password in B&R APROL7.0 High
- b&r industrial automation aprolPrivilege escalation in B&R APROL8.5 High
- b&r industrial automation aprolImproper authentication in SSH of B&R APROL8.5 High
- b&r industrial automation aprolUnauthorized local file reading in B&R APROL9.2 Critical
- b&r industrial automation gmbh aprolIncorrect Permission Assignment in APROL file system8.5 High
- b&r industrial automation gmbh aprolCross Site Scripting vulnerability in APROL Web Portal5.1 Medium
- b&r industrial automation gmbh aprolServer-Side Request Forgery (authenticated) in APROL Web Portal5.3 Medium
- b&r industrial automation gmbh aprolServer-Side Request Forgery (unauthenticated) in APROL Web Portal6.9 Medium
- b&r industrial automation aprolImproper Handling of Insufficient Permissions or Privileges in B&R APROL6.8 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System aboutus.php sql injection6.9 Medium
- mannaandpoem openmanusmannaandpoem OpenManus Prompt python_execute.py os command injection5.3 Medium
- b&r industrial automation gmbh aprolImproper session handling in B&R APROL5.5 Medium
- b&r industrial automation gmbh aprolDefault or Guessable SNMP community names in B&R APROL8.7 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getDualbandSync command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getssidname command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request networkSetup command injection8.6 High
- h3c magic nx30 pro, magic nx400 +1 moreH3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection8.6 High
- h3c magic nx30 proH3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request esps command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request auth command injection8.6 High
- Show moreLoading…