CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in personalizacao.php6.2 Medium
- labredescefetrj wegiaSQL Injection in query_geracao_auto.php9.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario10.0 Critical
- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfo6.4 Medium
tar-fsnpm,node-tar-fsDebian,reaperAzure Linux +2 more +4 moretar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File7.5 High- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter id6.4 Medium
- labredescefetrj wegiaWeGIA Vulnerable to Broken Authentication - Old Password Validation9.3 Critical
- seo squirrly plugin by squirrly seo, squirrly seo plugin by squirrly seo +1 moreWordPress SEO Plugin by Squirrly SEO plugin <= 12.4.03 - SQL Injection vulnerability8.5 High
- automattic woocommerceWordPress WooCommerce plugin <= 9.7.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- john darrel hide my wp ghostWordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability9.6 Critical
- yudleethemes whitish liteWordPress Whitish Lite theme <= 2.1.13 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- marmar8x notif bellWordPress Notif Bell Plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- a.h.c. waasdorp simple google calendar outlook events block widgetWordPress Simple Google Calendar Outlook Events Block Widget plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- eladminelunez eladmin upload checkFile deserialization5.1 Medium
- foliovision filled inWordPress Filled In Plugin <= 1.9.2 - CSRF to Stored XSS vulnerability7.1 High
- inet webkitWordPress iNET Webkit Plugin <= 1.2.2 - Broken Access Control vulnerability5.3 Medium
- md abu jubayer hossain easy booked – appointment booking and scheduling management system for wordpressWordPress Easy Booked Plugin <= 2.4.5 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- verkkovaraani print pdf generator and publisherWordPress Print PDF Generator and Publisher plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- acowebs product table for woocommerceWordPress Product Table For WooCommerce Plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- integrationdevpaytm paytm payment donation, paytm payment donation +1 moreWordPress Paytm Payment Donation Plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- themehunk vayu blocks – gutenberg blocks for wordpress & woocommerce, vayu blocks +1 moreWordPress Vayu Blocks – Gutenberg Blocks plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on x11_graphics6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on canvas_text6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on xstrftime6.2 Medium
- athemes addons for elementor, smub athemes addons for elementor +1 moreWordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- smackcoders aio performance profiler, monitor, optimize, compress & debugWordPress AIO Performance Profiler plugin <= 1.2 - Broken Access Control vulnerability4.3 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on getannotatestring6.2 Medium
- apache kylinApache Kylin: The remote code execution via jdbc url7.2 High
- plugin devs blog, posts and category filter for elementorWordPress Blog, Posts and Category Filter for Elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on plot3d_points6.2 Medium
- apache kylinApache Kylin: SSRF vulnerability in the diagnosis api6.5 Medium
- wedevs wp project managerWordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- kendysond payment forms for paystackWordPress Payment Forms for Paystack plugin <= 4.0.1 - SQL Injection vulnerability7.6 High
- deepak khokhar listings for appfolio, listings for appfolio for appfolio +1 moreWordPress Listings for Appfolio plugin <= 1.2.0 - CSRF to Stored XSS vulnerability7.1 High
- themeisle orbit fox by themeisle, orbit fox +1 moreWordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- linux, linux kernel +1 moreRDMA/mlx5: Fix the recovery flow of the UMR QP4.7 Medium
- linux, linux kernel +1 moreipvlan: ensure network headers are in skb linear part5.5 Medium
- linux, linux kernel +1 moreidpf: fix checksums set in idpf_rx_rsc()8.2 High
- linux, linux kernel +1 moreperf/core: Add RCU read lock protection to perf_iterate_ctx()7.8 High
- linux, linux kernel +1 moreRDMA/mlx5: Fix a WARN during dereg_mr for DM type5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up7.8 High
- linux, linux kernel +1 moreRDMA/mlx5: Fix implicit ODP hang on parent deregistration5.5 Medium
- linux, linux kernel +1 moreRDMA/bnxt_re: Fix the page details for the srq created by kernel consumers7.5 High
- linux, linux kernel +1 morenet: better track kernel sockets lifetime7.8 High
- linux, linux kernel +1 moreice: Fix deinitializing VF in error path7.8 High
- linux, linux kernel +1 morenet/mlx5: Fix vport QoS cleanup on error7.8 High
- linux, linux kernel +1 moreuprobes: Reject the shared zeropage in uprobe_write_opcode()5.5 Medium
- linux, linux kernel +1 moredrm/xe/userptr: fix EFAULT handling5.5 Medium
- linux, linux kernel +1 morebtrfs: fix use-after-free on inode when scanning root during em shrinking7.8 High
- linux, linux kernel +1 morei2c: npcm: disable interrupt enable bit before devm_request_irq5.5 Medium
- Show moreLoading…