CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- dell ecs, elastic cloud storage, objectscale +2 moreDell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An...3.1 Low
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator <= 1.42.0 - Order Replay Vulnerability5.3 Medium
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit'6.4 Medium
- saadiqbal password protected — lock entire site, pages, posts, categories, and partial contentPassword Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure5.3 Medium
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...6.3 Medium
- honor phoneservice, com.hihonor.phoneservice +1 moreCode Injection Vulnerability in Phoneservice8.1 High
- honor gamecenter, com.hihonor.gamecenter +1 moreWhitelist bypass Vulnerability in GameCenter8.1 High
- honor baidu, com. hihonor.baidu.browser +1 moreType Confusion Vulnerability in Browser4.3 Medium
- techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builderFluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- perforce delphixPrivilege Chaining in Delphix8.5 High
- perforce delphixImproper Access Control in Delphix Masking Engine9.0 Critical
- davidvongries ultimate dashboardUltimate Dashboard < 3.8.6 - Admin+ Stored XSS3.5 Low
- davidvongries ultimate dashboardUltimate Dashboard < 3.8.6 - Admin+ Stored XSS3.5 Low
- davidvongries ultimate dashboardUltimate Dashboard < 3.8.6 - Admin+ Stored XSS3.5 Low
- klarna checkout for woocommerce, unknown klarna checkout for woocommerce +1 moreKlarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging7.5 High
- icegram express, unknown icegram express formerly known as email subscribers +1 moreEmail Subscribers < 5.7.52 - Admin+ Stored XSS3.5 Low
- benjaminprojas wp editorWP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read4.9 Medium
- benjaminprojas wp editorWP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Update7.2 High
- sunnet technology co., ltd. wisdom master proWisdom Master Pro - Missing Authorization6.9 Medium
- sunnet technology co., ltd. wisdom master proWisdom Master Pro - Unrestricted Upload of File with Dangerous Type5.3 Medium
- sunnet technology co., ltd. wisdom master proWisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP Program9.9 Critical
- google chromeos, chrome os +1 moreA race condition Use-After-Free vulnerability exists in the virtio_transport_space_update...8.1 High
- avb http request2PEAR HTTP_Request2 vulnerable to Cross-site Scripting5.4 Medium
- nullsoft scriptable install system, siemens simatic technology package tpcamgen, simotion oa miif +3 more +5 moreNullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate...8.1 High
- visicutVisiCut 2.1 allows stack consumption via an XML document with nested set elements, as...3.3 Low
- gnome libxml2In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has...2.9 Low
- yassmittal commercifyA CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions...6.3 Medium
- landchatA RCE vulnerability in the core application in LandChat 3.25.12.18 allows an unauthenticated...9.8 Critical
- litepublisher litepubl cmsLitepubl CMS <= 7.0.9 is vulnerable to RCE in admin/service/run.7.2 High
- appleple a-blogcmsAn issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the ...7.6 High
- mybbAn issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add...7.6 High
- mybbAn issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail...7.6 High
- mybbAn issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change...7.6 High
- mybbAn issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a...7.6 High
- personal-management-system personal management systemAn issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker...6.5 Medium
- personal-management-system personal management systemAn issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker...6.5 Medium
- personal-management-system personal management systemAn issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker...6.5 Medium
- personal-management-system personal management systemAn issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker...6.5 Medium
- seopanel seo panelAn issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the...7.6 High
- seopanel seo panelAn issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the...7.6 High
- lm21 twonavAn issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via...6.5 Medium
- lm21 twonavAn issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via...6.5 Medium
- No product listedAn issue in DataPatrol Screenshot watermark, printing watermark agent v.3.5.2.0 allows a...6.2 Medium
- foxcmsFOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.7.2 High
- foxcmsIn FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability....7.2 High
- alfa wifi camppro firmwareBuffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote...9.8 Critical
- alfa wifi camppro firmwareBuffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote...9.8 Critical
- alfa wifi camppro firmwareBuffer Overflow vulnerability in ALFA_CAMPRO-co-2.29 allows a remote attacker to execute...9.8 Critical
- netgear r6100 firmwareBuffer Overflow vulnerability in Netgear- R61 router V1.0.1.28 allows a remote attacker to...9.8 Critical
- dlink dir-823x firmwareAn issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the...9.8 Critical
- Show moreLoading…