CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- croogocroogo Host header injection9.1 Critical
- github enterprise serverMarkdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers8.6 High
- github enterprise serverPre-Receive Hook Remote Code Execution vulnerability was identified in GitHub Enterprise Server that allowing Privilege Escalation7.1 High
- github enterprise serverMissing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names5.3 Medium
opensslTuxCare,openssl-develTuxCare,openssl-libsTuxCare +2 more +4 moreUpdate of opensslNo score- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by a failure to restrict URL access vulnerability2.5 Low
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted upload5.3 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload5.3 Medium
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities2.6 Low
- rasahq rasa-pro-security-advisoriesRasa Pro Missing Authentication For Voice Connector APIs6.5 Medium
- razormist phone management systemSourceCodester Phone Management System Password main buffer overflow4.8 Medium
- pcman ftp serverPCMan FTP Server MPUT Command buffer overflow6.9 Medium
- linux, linux kernel +1 morecan: peak_usb: fix use after free bugs8.8 High
- linux, linux kernel +1 morecan: vxcan: vxcan_xmit: fix use after free bug7.8 High
- linux, linux kernel +1 morecan: dev: can_restart: fix use after free bug8.8 High
- linux, linux kernel +1 morecan: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context5.5 Medium
- ibm iIBM i privilege escalation7.2 High
- jetbrains rubymineIn JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfaces8.3 High
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient...6.1 Medium
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication...6.9 Medium
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible8.3 High
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin4.2 Medium
- dastan800 visualslider sldierWordPress visualslider Sldier plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- claire ryan author showcaseWordPress Author Showcase plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- mingocommerce delete all postsWordPress Delete All Posts plugin <= 1.1.1 - Broken Access Control vulnerability6.5 Medium
- fyljp spiderdisplayWordPress SpiderDisplay plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- totalsuite totalcontest liteWordPress TotalContest Lite Plugin <= 2.8.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hiren patel custom users orderWordPress Custom Users Order Plugin <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpseek wordpress dashboard tweeterWordPress WordPress Dashboard Tweeter plugin <= 1.3.2 - Settings Change vulnerability6.5 Medium
- fadi med editor wysiwyg background colorWordPress Editor Wysiwyg Background Color plugin <= 1.0 - Broken Access Control vulnerability6.5 Medium
- debounce email validatorWordPress DeBounce Email Validator plugin <= 5.6.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- autoglot – automatic wordpress translationWordPress Autoglot – Automatic WordPress Translation plugin <=2.4.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jobscore job managerWordPress Job Manager plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- akadrama shipping with venipak for woocommerceWordPress Shipping with Venipak for WooCommerce plugin <= 1.22.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themefic instantioWordPress Instantio plugin <= 3.3.7 - Settings Change vulnerability6.5 Medium
- ays pro poll makerWordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability6.5 Medium
- aa web servant 12 step meeting listWordPress 12 Step Meeting List plugin <= 3.16.5 - Settings Change vulnerability6.5 Medium
- webheadcoder wp log actionWordPress WP Log Action Plugin <= 0.51 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bitsstech shipment tracker for woocommerceWordPress Shipment Tracker for Woocommerce plugin <= 1.4.23 - Cross Site Scripting (XSS) vulnerability7.1 High
- tyche softwares arconix shortcodesWordPress Arconix Shortcodes plugin <= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- syed balkhi beacon lead magnets and lead captureWordPress Beacon Lead Magnets and Lead Capture Plugin <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- devitems ht eventWordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dan-lucian stefancu empty tags removerWordPress Empty Tags Remover Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- webtoffee wordpress backup & migrationWordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability5.9 Medium
- rob scott eazy under constructionWordPress Eazy Under Construction Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dhanendran rajagopal term taxonomy converterWordPress Term Taxonomy Converter Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pickplugins wishlistWordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mat bao corporation wp helper premiumWordPress WP Helper Premium plugin <= 4.6.1 - Broken Access Control vulnerability6.5 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- radiustheme classified listingWordPress Classified Listing plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…