CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- campcodes online hotel reservation systemCampcodes Online Hotel Reservation System add_reserve.php sql injection5.3 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions4.3 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure4.3 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions4.3 Medium
- campcodes online hotel reservation systemCampcodes Online Hotel Reservation System add_query_account.php cross site scripting5.1 Medium
- campcodes online hotel reservation systemCampcodes Online Hotel Reservation System edit_room.php unrestricted upload5.1 Medium
- phoenix contact axl f bk eip, axl f bk eip ef, axl f bk eip xc +11 more +13 moreHTTP Service DoS Vulnerability7.5 High
- helmholz rex 200/250, rex 300, mb connect line mbnet hw1 +1 more +3 moreHigh Privilege RCE via LUA Sandbox Escape7.2 High
- campcodes online hotel reservation systemCampcodes Online Hotel Reservation System Login index.php sql injection6.9 Medium
- ultimatefosters ultimateposddd5.1 Medium
- code-projects vehicle managementcode-projects Vehicle Management updatebal.php sql injection6.9 Medium
- code-projects vehicle managementcode-projects Vehicle Management addvehicle.php sql injection6.9 Medium
- apache jspwikiApache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin6.1 Medium
- apache jspwikiApache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing7.5 High
- code-projects vehicle managementcode-projects Vehicle Management addcompany.php sql injection6.9 Medium
- android tvRace condition in AndroidTV TvSettings6.9 Medium
- code-projects vehicle managementcode-projects Vehicle Management print.php sql injection6.9 Medium
- code-projects exam form submissioncode-projects Exam Form Submission update_s7.php sql injection6.9 Medium
- alfasado powercmsReflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a...5.3 Medium
- alfasado powercmsStored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product...5.1 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting5.4 Medium
- alfasado powercmsA path traversal issue exists in file uploading feature of multiple versions of PowerCMS....5.3 Medium
- alfasado powercmsA path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A...8.6 High
- alfasado powercmsMultiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product...4.8 Medium
- alfasado powercmsMultiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product...5.1 Medium
- code-projects exam form submissioncode-projects Exam Form Submission update_s5.php sql injection6.9 Medium
- portabilis i-educarPortabilis i-Educar educar_escolaridade_lst.php cross site scripting5.3 Medium
- portabilis i-educarPortabilis i-Educar educar_avaliacao_desempenho_lst.php cross site scripting5.3 Medium
- zte japan. k.k. zxhn-f660a, zxhn-f660t +1 moreZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all...8.7 High
- portabilis i-educarPortabilis i-Educar pesquisa_pessoa_lst.php cross site scripting5.3 Medium
- portabilis i-educarPortabilis i-Educar funcionario_vinculo_lst.php cross site scripting5.3 Medium
- portabilis i-educarPortabilis i-Educar educar_servidor_lst.php cross site scripting5.3 Medium
- jordy meow ai engineAI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter6.4 Medium
- portabilis i-educarPortabilis i-Educar atendidos_cad.php cross site scripting5.1 Medium
- kehua charging pile cloud platformKehua Charging Pile Cloud Platform home improper authentication6.9 Medium
- kehua charging pile cloud platformKehua Charging Pile Cloud Platform findAllTask sql injection5.3 Medium
- portabilis i-educarPortabilis i-Educar educar_aluno_lst.php cross site scripting5.3 Medium
- 51mis lingdang crmShanghai Lingdang Information Technology Lingdang CRM yunzhijiaApi.php delete_user sql injection5.3 Medium
- openviglet shioopenviglet shio ShStaticFileAPI.java shStaticFileUpload unrestricted upload5.3 Medium
- openviglet shioopenviglet shio ShStaticFileAPI.java shStaticFilePreUpload path traversal5.3 Medium
- carmelo intern membership management systemcode-projects Intern Membership Management System Error Message fill_details.php cross site scripting5.3 Medium
libavcOSS-FuzzHeap-buffer-overflow in isvcd_mark_err_slice_skipNo score- carmelo intern membership management systemcode-projects Intern Membership Management System student_login.php sql injection6.9 Medium
- magnussolution magnusbillingA Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to...8.0 High
- devaslanphp project managementA stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4...7.6 High
- No product listedA cross-site scripting (XSS) vulnerability exists in the LB-Link BL-CPE300M 01.01.02P42U14_06...6.1 Medium
- microweberMicroweber Has Stored XSS Vulnerability in User Profile Fields7.6 High
- dlink di-8200 firmwareD-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxz_dlink_asp function via the...3.5 Low
- dlink di-8200 firmwareD-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the...3.5 Low
- Show moreLoading…