CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- xiaoyunjie openvpn-cms-flaskxiaoyunjie openvpn-cms-flask User Creation Endpoint openvpn.py create_user command injection5.3 Medium
- esp32async espasyncwebserverESPAsyncWebServer Vulnerable to CRLF Injection in AsyncWebHeader.cpp8.7 High
- gooaclok819 sublinkxgooaclok819 sublinkX template.go AddTemp path traversal5.3 Medium
- hkuds lightragHKUDS LightRAG File Upload document_routes.py upload_to_input_dir path traversal4.8 Medium
- dbgpt db-gpteosphoros-ai db-gpt import import_flow path traversal6.9 Medium
- starcitizentools mediawiki-extensions-tabberneueTabberNeue vulnerable to Stored XSS through wikitext8.6 High
- dover fueling solutions progauge maglink lx 4, progauge maglink lx plus, progauge maglink lx ultimate +2 moreDover Fueling Solutions ProGauge MagLink LX Consoles Missing Authentication for Critical Function9.3 Critical
- trendmakers sight bulb pro firmware zj cg32-2201TrendMakers Sight Bulb Pro Command Injection5.2 Medium
- trendmakers sight bulb pro firmware zj cg32-2201TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm6.8 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs4.3 Medium
- mobilteg mobile informatics mikro hand terminal - mikrodbSQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB9.8 Critical
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it5.2 Medium
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- eron software wowwo crmSQLi in Eron Software's Wowwo CRM9.8 Critical
github.com/go-viper/mapstructureGo,github.com/go-viper/mapstructure/v2Go +1 moremapstructure May Leak Sensitive Information in Logs When Processing Malformed Data5.3 Medium- mavi yeşil software guest tracking softwareSQLi in Mavi Yeşil Software's Guest Tracking Software9.8 Critical
tzdataTuxCareUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCareUpdate of tzdataNo score- case informatics erpSQLi in Case Informatics' Case ERP9.8 Critical
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- labredescefetrj wegiaWeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter10.0 Critical
- goauthentik authentikauthentik has Insufficient Session verification for Remote Access Control endpoint access5.5 Medium
- eclipse open vsx, eclipse foundation open vsx registry, openvsx +2 moreOn open-vsx.org http://open-vsx.org/ it was possible to run an arbitrary build scripts for auto...7.6 High
- ibm cloud pak systemIBM Cloud Pak System HTML injection5.4 Medium
- dell unisphere for powermax vapp, solutions enabler virtual appliance, unisphere for powermax virtual appliance +2 moreDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of...7.2 High
- sfturing hosp ordersfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection5.3 Medium
- devnex addons for elementorWordPress Devnex Addons For Elementor plugin <= 1.0.9 - Local File Inclusion Vulnerability7.5 High
- dor re.placeWordPress re.place plugin <= 0.2.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- abditsori my resume builderWordPress My Resume Builder plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ethoseo track everythingWordPress Track Everything plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- samcharrington rss digestWordPress RSS Digest plugin <= 1.5 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- szajenw społecznościowa 6 pl 2013WordPress Społecznościowa 6 PL 2013 plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- rui mashita aioseo multibyte descriptionsWordPress Aioseo Multibyte Descriptions plugin <= 0.0.6 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- dilip kumar beauty contact popup formWordPress Beauty Contact Popup Form plugin <= 6.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- danbriapps pre-publish post checklistWordPress Pre-Publish Post Checklist plugin <= 3.1 - Broken Access Control Vulnerability4.3 Medium
- zealousweb accept authorize.net payments using contact form 7WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure Vulnerability5.3 Medium
- raise the money the moneyWordPress Raise The Money plugin <= 5.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wp enhanced free downloads eddWordPress Free Downloads EDD plugin <= 1.0.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpmaniax wp db boosterWordPress WP DB Booster plugin <= 1.0.1 - Broken Access Control Vulnerability5.4 Medium
- acmeedesign wpshapere - wordpress admin themeWordPress WPShapere Lite plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- alanft relocate uploadWordPress Relocate Upload plugin <= 0.24.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- sh1zen wp optimizerWordPress WP Optimizer plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) vulnerability9.6 Critical
- plumwd twitch tv embed suiteWordPress Twitch TV Embed Suite plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- looks awesome onionbuzzWordPress OnionBuzz plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- amol nirmala waman navayan subscribeWordPress Navayan Subscribe plugin <= 1.13 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- funnnny hidepostWordPress HidePost plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- zealopensource accept stripe payments using contact form 7WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability5.3 Medium
- gopi plus image slider with descriptionWordPress Image Slider With Description plugin <= 9.2 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- Show moreLoading…