CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- go standard library net/httpSensitive headers not cleared on cross-origin redirect in net/http6.8 Medium
- go standard library crypto/x509Usage of ExtKeyUsageAny disables policy validation in crypto/x5097.5 High
- go standard library os, syscall, golang go +2 moreInconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall5.5 Medium
- haxtheweb issues, psu haxcms-php +1 moreHAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter6.5 Medium
- haxtheweb issues, psu haxcms-nodejs, haxcms-php +2 moreHax CMS Stored Cross-Site Scripting vulnerability8.5 High
- jsnjfz webstack-gunsjsnjfz WebStack-Guns cross-site request forgery5.3 Medium
- lablup backendaiExposure of sensitive Information allows account takeover8.0 High
- lablup backendaiImproper access control allows arbitrary account creation9.8 Critical
- lablup backendaiMissing Authorization for Interactive Sessions8.1 High
- jsnjfz webstack-gunsjsnjfz WebStack-Guns File Upload UserMgrController.java cross site scripting5.1 Medium
- emlogEmlog article.php cross site scripting5.1 Medium
- bzotheme fitrushWordPress Fitrush <= 1.3.4 - Local File Inclusion Vulnerability8.1 High
- snstheme bodycenter - gym, fitness woocommerce wordpress themeWordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability8.1 High
- ifkooo one-loginWordPress One-Login plugin <= 1.4 - Privilege Escalation Vulnerability8.1 High
- facturaone ticketbai facturas para woocommerceWordPress TicketBAI Facturas para WooCommerce plugin <= 3.19 - SQL Injection Vulnerability9.3 Critical
- bzotheme craftxtoreWordPress CraftXtore theme <= 1.7 - Local File Inclusion Vulnerability8.1 High
- snstheme nitanWordPress Nitan theme <= 2.9 - Local File Inclusion Vulnerability8.1 High
- axiomthemes labWordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerability8.1 High
- bzotheme petitoWordPress Petito theme < 1.6.6 - Local File Inclusion vulnerability8.1 High
- snstheme avazWordPress Avaz theme <= 2.8 - Local File Inclusion Vulnerability8.1 High
- bzotheme giftxtoreWordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerability8.1 High
- snstheme valen - sport, fashion woocommerce wordpress themeWordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability8.1 High
- miniorange password policy managerWordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability8.8 High
- snstheme sns antonWordPress SNS Anton theme <= 4.1 - Local File Inclusion Vulnerability8.1 High
- payu indiaWordPress PayU India plugin < 3.8.8 - Account Takeover vulnerability9.8 Critical
- elfsight contact form widgetWordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure Vulnerability7.5 High
- pixelgrade category iconWordPress Category Icon plugin <= 1.0.3 - XML External Entity (XXE) vulnerability9.1 Critical
- appthaplugins apptha slider galleryWordPress Apptha Slider Gallery plugin <= 2.5 - Arbitrary File Read vulnerability7.5 High
- themeton the fashion - model agency one page beauty themeWordPress The Fashion - Model Agency One Page Beauty Theme plugin <= 1.4.4 - Deserialization of untrusted data Vulnerability9.8 Critical
- lambertgroup universal video playerWordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- lambertgroup revolution video playerWordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- woobewoo wbw product table proWordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerability9.3 Critical
- redqteam wishlistWordPress Wishlist plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themeton pimp - creative multipurposeWordPress PIMP - Creative MultiPurpose <= 1.7 - Deserialization of untrusted data Vulnerability9.8 Critical
- themeton flap - business wordpress themeWordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection Vulnerability9.8 Critical
- kamleshyadav wp lead capturing pagesWordPress WP Lead Capturing Pages plugin < 2.6 - SQL Injection vulnerability9.3 Critical
- lambertgroup sticky radio playerWordPress Sticky Radio Player plugin <= 3.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- lambertgroup cleverWordPress CLEVER plugin <= 2.6 - Arbitrary File Download Vulnerability7.5 High
- themeton pressgrid - frontend publish reaction & multimedia themeWordPress PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Deserialization of untrusted data Vulnerability9.8 Critical
- themeton spareWordPress Spare <= 1.7 - Cross Site Scripting (XSS) Vulnerability7.1 High
- lambertgroup universal video playerWordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- amentotech wp guppyWordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability8.5 High
- lambertgroup shoutWordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sneeit wordpress flatnews themeWordPress FlatNews theme <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fantasticplugins sumo affiliates proWordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerability10.0 Critical
- looks awesome team builderWordPress Team Builder plugin <= 1.5.7 - Broken Access Control Vulnerability7.6 High
- webgeniuslab seofy coreWordPress Seofy Core plugin <= 1.6.8 - Local File Inclusion Vulnerability8.1 High
- gavias krowdWordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerability8.1 High
- frenify arloWordPress Arlo theme <= 6.0.3 - Local File Inclusion Vulnerability8.1 High
- magentech revoWordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability7.5 High
- Show moreLoading…