CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- mtons mblogmtons mblog password excessive authentication6.3 Medium
- d-link dir-818lw, dlink dir-818lw firmware +1 moreD-Link DIR-818LW DHCP Reserved Address bsc_lan.php cross site scripting5.1 Medium
- iqonicdesign graphina – charts and graphs for elementorGraphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- bplugins bslider – create responsive image, post, product, and video slidersB Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery4.3 Medium
- bplugins bslider – create responsive image, post, product, and video slidersB Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure4.3 Medium
- glboy otp login with phone number, otp verificationWooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass8.1 High
- railmedia order tip for woocommerceOrder Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts7.5 High
- surbowl dormitory-management-phpSurbowl dormitory-management-php login.php sql injection6.9 Medium
- lemonosLemonOS HTTP Client main.cpp HTTPGet stack-based overflow6.9 Medium
- mechrevo control center gx v2Mechrevo Control Center GX V2 reg File uncontrolled search path7.3 High
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System expense_report.php sql injection6.9 Medium
- mtons mblogmtons mblog cross-site request forgery5.3 Medium
- linlinjava litemalllinlinjava litemall Business Logic express logic error5.3 Medium
albatrossopamAlbatross console out of memory6.5 MediumlibwebpOSS-FuzzNull-dereference READ in enc_fuzzer@Enc.EncTestNo scoreliblouisOSS-FuzzUNKNOWN WRITE in _lou_handlePassVariableActionNo scorelibwebpOSS-FuzzNull-dereference READ in advanced_api_fuzzer@AdvancedApi.AdvancedApiTestNo score- anisha online medicine guidecode-projects Online Medicine Guide browsemdcn.php sql injection6.9 Medium
- sourcecodester covid 19 testing management system, unyasoft covid19 testing management system +1 moreSourceCodester COVID 19 Testing Management System edit-phlebotomist.php sql injection6.9 Medium
- sourcecodester covid 19 testing management system, unyasoft covid19 testing management system +1 moreSourceCodester COVID 19 Testing Management System bwdates-report-result.php sql injection6.9 Medium
- sourcecodester covid 19 testing management system, unyasoft covid19 testing management system +1 moreSourceCodester COVID 19 Testing Management System test-details.php sql injection6.9 Medium
- hcl software connections docsHCL Connections Docs is vulnerable to a Denial of Service (DoS) attack4.8 Medium
- sourcecodester covid 19 testing management system, unyasoft covid19 testing management system +1 moreSourceCodester COVID 19 Testing Management System search-report-result.php sql injection6.9 Medium
- sourcecodester covid 19 testing management system, unyasoft covid19 testing management system +1 moreSourceCodester COVID 19 Testing Management System profile.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System expense_category.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System expense.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System currency.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System payment.php sql injection6.9 Medium
- tenda g1, g1 firmware +1 moreTenda G1 Firmware Update check_upload_file data authenticity7.5 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 Firmware Update check_fw data authenticity7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L boa FirmwareUpgrade data authenticity7.5 High
- givanz vvvebgivanz Vvveb Endpoint post cross site scripting5.1 Medium
- givanz vvvebgivanz Vvveb edit.tpl cross site scripting5.1 Medium
- lisensee netinsight analytics implementation pluginWordPress NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- flexostudio flexo-social-galleryWordPress flexo-social-gallery Plugin <= 1.0006 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- lisensee netinsight analytics implementation pluginWordPress NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- josepsitjar storymapWordPress StoryMap Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability8.2 High
- bcupham video expanderWordPress Video Expander Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- pl4g4 wp-database-optimizer-toolsWordPress WP-Database-Optimizer-Tools Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- codeablepressWordPress CodeablePress plugin <= 1.0.2 - Broken Access Control vulnerability4.3 Medium
- hakeemnala build app onlineWordPress Build App Online Plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- kodeshpa simplifiedWordPress Simplified plugin <= 1.0.11 - Server Side Request Forgery (SSRF) vulnerability5.5 Medium
- wpestate wp rentalsWordPress WP Rentals theme <= 3.16.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pixel makers creative inc. app, saas & software startup tech theme - stratusWordPress Stratus theme <= 4.2.5 - Broken Access Control vulnerability4.3 Medium
- goodlayers modernizeWordPress Modernize Theme <= 3.4.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- goodlayers modernizeWordPress Modernize Theme <= 3.4.0 - Broken Access Control Vulnerability4.3 Medium
- laborator kaliumWordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- artiosmedia rss feed proWordPress RSS Feed Pro Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- primersoftware primer mydata for woocommerceWordPress Primer MyData for Woocommerce Plugin <= 4.2.5 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- wordliftWordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- Show moreLoading…