CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- cedcommerce wholesale market, wholesale market for woocommerce +1 moreWholesale Market <= 2.2.2 - Settings Update via CSRF6.5 Medium
- tenda ac7, ac7 firmware +1 moreTenda AC7 SetRebootTimer formSetRebootTimer stack-based overflow8.7 High
- watchguard fireware osWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration4.8 Medium
- watchguard fireware osWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration4.8 Medium
- tenda ac7, ac7 firmware +1 moreTenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflow8.7 High
- phpgurukul park ticketing management systemPHPGurukul Park Ticketing Management System add-normal-ticket.php sql injection5.3 Medium
- gnu glibcUntrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to...7.8 High
- senior-walter online student clearance systemSourceCodester Online Student Clearance System exposure of information through directory listing6.9 Medium
- spring framework, vmware spring framework +1 moreSpring Framework DataBinder Case Sensitive Match Exception3.1 Low
- oretnom23 stock management systemSourceCodester/oretnom23 Stock Management System view_bo sql injection5.3 Medium
- gongfuxiang schoolcmsgongfuxiang schoolcms index.php SaveInfo sql injection5.1 Medium
- phpgurukul online course registrationPHPGurukul Online Course Registration news.php sql injection6.9 Medium
- phpgurukul online course registrationPHPGurukul Online Course Registration edit-student-profile.php sql injection6.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in libsoup may lead to denial of service4.3 Medium
- freefloat ftp serverFreeFloat FTP Server MDELETE Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server HASH Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server GLOB Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server LCD Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server DELETE Command buffer overflow6.9 Medium
- oretnom23 stock management systemSourceCodester/oretnom23 Stock Management System view_sale sql injection5.3 Medium
- redqteam wishlistWordPress Wishlist plugin <= 2.1.0 - Sensitive Data Exposure Vulnerability4.3 Medium
- themeton rozarioWordPress Rozario <= 1.4 - Broken Access Control Vulnerability5.3 Medium
- redqteam wishlistWordPress Wishlist plugin <= 2.1.0 - Broken Access Control Vulnerability4.3 Medium
- themeton seven starsWordPress Seven Stars <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- themeton acerolaWordPress Acerola theme <= 1.6.5 - Broken Access Control Vulnerability5.3 Medium
- themeton the businessWordPress The Business <= 1.6.1 - Broken Access Control Vulnerability5.3 Medium
- themeton hotstar – multi-purpose business themeWordPress HotStar – Multi-Purpose Business Theme <= 1.4 - Broken Access Control Vulnerability5.3 Medium
- themeton spareWordPress Spare <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- lambertgroup shoutWordPress SHOUT plugin <= 3.5.3 - SQL Injection Vulnerability8.5 High
- lambertgroup ubersliderWordPress UberSlider plugin <= 2.3 - SQL Injection Vulnerability8.5 High
- lambertgroup magic responsive slider and carousel wordpressWordPress Magic Responsive Slider and Carousel WordPress plugin < 1.6 - SQL Injection Vulnerability8.5 High
- loopus wp ultimate tours builderWordPress WP Ultimate Tours Builder plugin <= 1.055 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- kamleshyadav pixel wordpress form builderplugin & autoresponderWordPress Pixel Form BuilderPlugin & Autoresponder plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- quanticalabs css3 accordions for wordpressWordPress CSS3 Accordions for WordPress plugin <= 3.0 - Broken Access Control Vulnerability5.4 Medium
- quanticalabs css3 accordions for wordpressWordPress CSS3 Accordions for WordPress plugin <= 3.0 - CSRF to Stored XSS vulnerability7.1 High
- lambertgroup multimedia responsive carousel with image video audio supportWordPress Multimedia Responsive Carousel with Image Video Audio Support plugin <= 2.6.0 - SQL Injection Vulnerability8.5 High
- lambertgroup sticky radio playerWordPress Sticky Radio Player plugin <= 3.4 - SQL Injection Vulnerability8.5 High
- chaser324 featured posts scrollWordPress Featured Posts Scroll plugin <= 1.25 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- mojofywp product carousel for woocommerce – woorousellWordPress Product Carousel For WooCommerce – WoorouSell plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- lambertgroup sticky html5 music playerWordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection Vulnerability8.5 High
- lambertgroup responsive html5 audio player pro with playlistWordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection Vulnerability8.5 High
- wordpresschef salon booking proWordPress Salon Booking Wordpress plugin <= 10.10.2 - Broken Access Control vulnerability4.3 Medium
- thememove quickcal - appointment booking calendar for wordpressWordPress QuickCal plugin <= 1.0.15 - Sensitive Data Exposure Vulnerability4.3 Medium
- quantumcloud simple link directoryWordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability5.3 Medium
- lambertgroup radio player shoutcast & icecast wordpress pluginWordPress Radio Player Shoutcast & Icecast theme <= 4.4.6 - SQL Injection Vulnerability8.5 High
- lambertgroup countdown pro wp pluginWordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability8.5 High
- thememove quickcal - appointment booking calendar for wordpressWordPress QuickCal plugin <= 1.0.15 - CSRF to Privilege Escalation vulnerability8.8 High
- lambertgroup chameleon html5 audio player with/without playlistWordPress Chameleon HTML5 Audio Player With/Without Playlist plugin <= 3.5.6 - SQL Injection Vulnerability8.5 High
- imithemes eventerWordPress Eventer plugin < 3.11.4 - SQL Injection vulnerability9.3 Critical
- mojoomla wpgymWordPress WPGYM Plugin <= 65.0 - SQL Injection vulnerability9.3 Critical
- Show moreLoading…