CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- gitlabMissing Authorization in GitLab4.3 Medium
- gitlabMissing Authorization in GitLab2.7 Low
- hewlett packard enterprise hpe oneview for vmware vcenterHPE OneView for VMware vCenter (OV4VC), Local Elevation of Privilege8.7 High
- snyk cliSnyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode2.4 Low
- murtuzamakda52 web-camweb-cam <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter6.4 Medium
- azumbro drive folder embedderDrive Folder Embedder <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via tablecssclass Parameter6.4 Medium
- suhailahmad64 amazon products to woocommerceAmazon Products to WooCommerce <= 1.2.7 - Missing Authorization to Unauthenticated Arbitrary Product Creation5.3 Medium
- mdesignfa namasha by mdesign, mdezign namasha +1 moreNamasha By Mdesign <= 1.2.00 - Authenticated (Contributor+) Stored Cross-Site Scripting via playicon_title Parameter6.4 Medium
- smub charitable – donation plugin for wordpress – fundraising with recurring donations & more, wpbeginner charitable +1 moreCharitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings4.4 Medium
- coolrunner homerunnerHomerunner <= 1.0.30 - Cross-Site Request Forgery to Settings Update4.3 Medium
- zourbuth the countdown, the countdown – block countdown timer +1 moreThe Countdown <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via clientId Parameter6.4 Medium
- bernhard-riedl timezonecalculatorTimeZoneCalculator <= 3.37 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- grosbouff wp soundsystemWP SoundSystem <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsstm-track Shortcode6.4 Medium
- gurievcreative gc social wallGC Social wall <= 1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- emarket-design event rsvp and simple event management plugin, emarketdesign event rsvp and simple event management +1 moreEvent RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- fmos wp-photonavWP-PhotoNav <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photonav Shortcode6.4 Medium
- blakelong tournament bracket generatorTournament Bracket Generator <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via bracket Shortcode6.4 Medium
- nmedia simple user registration, najeebmedia memberhero +1 moreSimple User Registration <= 6.3 - Unauthenticated Privilege Escalation9.8 Critical
- corporatezen responsive food and drink menuResponsive Food and Drink Menu <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_pdf_menus Shortcode6.4 Medium
- vgwort vg wort metisVG WORT METIS <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update4.3 Medium
- bourgesloic post rating and reviewPost Rating and Review <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter6.4 Medium
- plugin devs post carousel slider for elementorPost Carousel Slider for Elementor <= 1.6.0 - Authenticated (Subscriber+) Missing Authorization via process_wbelps_promo_form Function4.3 Medium
- gopiplus owl carousel responsiveOwl carousel responsive <= 1.9 - Authenticated (Contributor+) SQL Injection via id Parameter8.8 High
- kaushik07 wp masonry & infinite scroll, wp masonry \& infinite scroll +1 moreWP Masonry & Infinite Scroll <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- ickata image editor by pixoImage Editor by Pixo <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via download Parameter6.4 Medium
- chemiker e.nigma buttonse.nigma buttons <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- phpgurukul dairy farm shop management systemA time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop...8.0 High
- phpgurukul dairy farm shop management systemA SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System...5.4 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in...5.4 Medium
- No product listedNorthern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control.9.1 Critical
- backdropcms backdrop cmsA Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30.6.1 Medium
- iroadau fx2 firmwareAn issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can...9.8 Critical
- mhsanaei 3x-uiAn issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute...9.8 Critical
- netboxNetbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the...6.5 Medium
- thebrowser arcArc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites (with...9.6 Critical
- gooaclok819 sublinkxgooaclok819 sublinkX jwt.go hard-coded key6.3 Medium
- code-projects inventory management systemcode-projects Inventory Management System fetchSelectedBrand.php sql injection6.9 Medium
- anisha car rental systemcode-projects Car Rental System add_cars.php unrestricted upload5.3 Medium
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- Show moreLoading…