CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- moshensky cf7 spreadsheetsWordPress CF7 Spreadsheets Plugin <= 2.3.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- syedamirhussain91 db backupWordPress DB Backup <= 6.0 - Broken Access Control Vulnerability6.5 Medium
- acato wp rest cacheWordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability7.5 High
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal Vulnerability4.2 Medium
- highwarden super store finderWordPress Super Store Finder Plugin <= 7.5 - SQL Injection Vulnerability9.3 Critical
- webcodingplace responsive posts carousel proWordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability7.5 High
- lcweb global galleryWordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability6.5 Medium
- themefunction wordpress event manager, event calendar and booking pluginWordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Arbitrary Content Deletion Vulnerability7.5 High
- themefunction wordpress event manager, event calendar and booking pluginWordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ronik@unlimitedwp project cost calculatorWordPress Project Cost Calculator Plugin <= 1.0.0 - Broken Access Control Vulnerability7.1 High
- realmag777 gmap targetingWordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability8.8 High
- softnwords smm apiWordPress SMM API plugin <= 6.0.31 - Broken Access Control vulnerability7.1 High
- unity business technology pty ltd the e-commerce erpWordPress The E-Commerce ERP <= 2.1.1.3 - Broken Access Control Vulnerability7.3 High
- russell jamieson captionpixWordPress CaptionPix <= 1.8 - Cross Site Scripting (XSS) Vulnerability7.1 High
- eyecix jobsearchWordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability7.5 High
- vonstroheim thebookingWordPress TheBooking Plugin <= 1.4.4 - Broken Access Control Vulnerability7.3 High
- infosoftplugin woocommerce point of sale (pos)WordPress WooCommerce Point Of Sale (POS) <= 1.4 - SQL Injection Vulnerability8.5 High
- ovatheme cube portfolioWordPress Cube Portfolio Plugin <= 1.16.8 - SQL Injection Vulnerability8.5 High
- campcodes online flight booking management systemCampcodes Online Flight Booking Management System flights.php sql injection6.9 Medium
- d-link dir‑818l, dlink dir-818l firmware +1 moreD-Link DIR‑818L ssdpcgi cgibin getenv command injection5.3 Medium
- akcess-net lepszy bipReflected XSS in Lepszy BIP5.1 Medium
- flowiseai flowiseUnsupervised OS command execution leads to remote code execution by unauthenticated network attackers9.8 Critical
- unknown disable-right-click-powered-by-pixterme, pixter-image-digital-license +1 moreMultiple Plugins from itayamar - Supply Chain Compromise9.8 Critical
flowisenpmUnintended dynamic code execution leads to remote code execution by network attackers9.8 Critical- code-projects hospital management systemPHPGurukul Hospital Management System edit-doctor.php sql injection6.9 Medium
- bosch rexroth ag ctrlx os - setupAmbiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to...7.1 High
- bosch rexroth ag ctrlx os - setupA vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote,...5.3 Medium
- bosch rexroth ag ctrlx os - setupA vulnerability in the web application of the ctrlX OS setup mechanism facilitated an...8.0 High
- apache brpcApache bRPC: Redis Parser Remote Denial of Service7.5 High
- code-projects hospital management systemPHPGurukul Hospital Management System doctor-specilization.php sql injection6.9 Medium
- sourcecodester covid 19 testing management system, unyasoft covid19 testing management system +1 moreSourceCodester COVID 19 Testing Management System check_availability.php sql injection6.9 Medium
- unknown ppwp – password protect pages, passwordprotectwp password protect wordpress +1 morePPWP < 1.9.11 - Subscriber+ Access Bypass via REST API6.5 Medium
- campcodes online flight booking management systemCampcodes Online Flight Booking Management System Login ajax.php sql injection6.9 Medium
- phpgurukul teachers record management systemPHPGurukul Teachers Record Management System search.php sql injection6.9 Medium
- campcodes online recruitment management systemCampcodes Online Recruitment Management System index.php sql injection6.9 Medium
- oppo health appArbitrary URL Loading in WebView Leading to Token Leakage Risk8.3 High
- d-link dir-825, dlink dir-825 firmware +1 moreD-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow8.6 High
- projectworlds visitor management systemprojectworlds Visitor Management System front.php sql injection6.9 Medium
- projectworlds visitor management systemprojectworlds Visitor Management System query_data.php sql injection6.9 Medium
- projectworlds online notes sharing platformprojectworlds Online Notes Sharing Platform login.php sql injection6.9 Medium
- fahadmahmood injection guardInjection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']6.1 Medium
- unknown wp shopify, fahadmahmood external store for shopify +1 moreWP Shopify < 1.5.4 - Reflected XSS6.1 Medium
- unknown quiz and survey master (qsm)QSM < 10.2.3 - Template Creation via CSRF4.3 Medium
- unknown structured content (json-ld) #wpscStructured Content < 1.7.0 - Contributor Stored XSS5.4 Medium
- tenda ac20, ac20 firmware +1 moreTenda AC20 saveParentControlInfo strcpy buffer overflow8.7 High
- tenda ac20, ac20 firmware +1 moreTenda AC20 WifiGuestSet buffer overflow8.7 High
- totolink n350r, n350r firmware +1 moreTOTOLINK N350R Telnet Service formSysTel backdoor5.3 Medium
- netskope clientHeap Overflow in Netskope Endpoint DLP Driver5.7 Medium
- netskope clientNetskope Client Local Elevation of Privileges6.0 Medium
- netskope clientOut-of-Bounds Read Vulnerability in Netskope Client2.0 Low
- Show moreLoading…