CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense software +1 more +3 moreCisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability8.6 High
- cisco catalyst sd-wan managerCisco Catalyst vManage Certificate Validation Vulnerability5.9 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco Catalyst Center Unprotected API Endpoint7.3 High
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-0567.4 High
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-0556.5 Medium
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-0548.8 High
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-0537.5 High
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-0524.8 Medium
- drupal iframe remove filter, iframe remove filter project remove filter +1 moreIFrame Remove Filter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-0516.1 Medium
- drupal klaro cookie & consent management, klaro cookie \& consent management project cookie \& consent management +1 moreKlaro Cookie & Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-0506.1 Medium
- drupal cookies consent management, cookies consent manager project coonsent manager +1 moreCOOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-0496.1 Medium
- drupal oembed providers, oembed providers project providers +1 moreoEmbed Providers - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-0486.1 Medium
- drupal restrict route by ip, restrict route by ip project route by ip +1 moreRestrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-0478.8 High
- jruby, jruby jruby-openssl +1 moreJRuby-OpenSSL has hostname verification disabled by default5.7 Medium
linux-realtimeUbuntulinux-realtime vulnerabilityNo score- graylog, graylog2 graylog2-server +1 moreGraylog Allows Session Takeover via Insufficient HTML Sanitization8.0 High
org.graylog2:graylog2-serverMavenGraylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser7.3 Highmithril-clientcrates.ioMithril snapshots for Cardano database could be compromised by an adversary4.9 Medium- oneidentity syslog-ng, debian linux +1 moretranport: TLS host name wildcard matching too lax7.5 High
- sysaid, sysaid on-prem +1 moreSysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection9.3 Critical
- sysaid, sysaid on-prem +1 moreSysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection9.3 Critical
- sysaid, sysaid on-prem +1 moreSysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection9.3 Critical
- contentstudioWordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability4.3 Medium
- ultimate member memberWordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerability5.5 Medium
- advancedfilemanager advanced file managerWordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability5.3 Medium
- delucks seoWordPress DELUCKS SEO plugin <= 2.5.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- moloni contribuinte checkoutWordPress Contribuinte Checkout plugin <= 2.0.03 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- smaily for wpWordPress Smaily for WP plugin <= 3.1.7 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- florent maillefaud wp maintenanceWordPress WP Maintenance plugin <= 6.1.9.7 - PHP Object Injection Vulnerability7.2 High
- ability, inc web accessibility with max accessWordPress Web Accessibility with Max Access plugin <= 2.0.9 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- rs wp themes wp book showcaseWordPress RS WP Book Showcase plugin <= 6.7.59 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gt3 themes photo galleryWordPress Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery plugin <= 2.7.7.25 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- faiyaz alam user login historyWordPress User Login History plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wooboxWordPress Woobox plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- credova financial financialWordPress Credova_Financial plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- manchumahara cbx map for google map & openstreetmapWordPress CBX Map for Google Map & OpenStreetMap plugin <= 1.1.12 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- cookiecodeWordPress CookieCode plugin <= 2.4.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- qusupport liveagentWordPress LiveAgent plugin <= 4.4.7 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- bistromatic n360 | splash screenWordPress N360 | Splash Screen plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- thimpress wp pipesWordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability4.4 Medium
- wooboxWordPress Woobox plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- codemstory 워드프레스 결제 심플페이WordPress 워드프레스 결제 심플페이 plugin <= 5.2.11 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- voidcoders wpbakery visual composer whmcs elementsWordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- productive minds commerceWordPress Productive Commerce plugin <= 1.1.40 - SQL Injection vulnerability9.3 Critical
- spiracle themes spiraclethemes site library, spiraclethemes site library +1 moreWordPress Spiraclethemes Site Library plugin <= 1.5.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- themarketer2023 themarketerWordPress theMarketer plugin <= 1.4.7 - CSRF to Stored XSS vulnerability7.1 High
- tggfref wp-recallWordPress WP-Recall <= 16.26.14 - Local File Inclusion Vulnerability7.5 High
- ilmosys open close woocommerce storeWordPress Open Close WooCommerce Store plugin <= 4.9.9 - Local File Inclusion vulnerability8.8 High
- axima pays – woocommerce payment gatewayWordPress Pays – WooCommerce Payment Gateway plugin <= 2.6 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- otwthemes sidebar manager lightWordPress Sidebar Manager Light plugin <= 1.18 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- Show moreLoading…