CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- opensolution quick.cmsStored Cross-Site Scripting in QuickCMS4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Unauthenticated File Access via URL5.3 Medium
- red hat openshift container platform 4Cri-o: large /etc/passwd file may lead to denial of service5.7 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Unvalidated File Upload5.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter5.1 Medium
- red hat mirror registry for red hat openshiftMirror-registry: host header injection in mirror-registry6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting through URLs6.9 Medium
- smub easy digital downloads – ecommerce payments and subscriptions made easyEasy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email...5.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect...7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content8.7 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature5.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic...6.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to...6.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference4.7 Medium
systemdTuxCare,libgudev1TuxCare,libgudev1-develTuxCare +7 more +9 moreUpdate of systemdNo score- apache eventmesh, apache software foundation eventmesh runtime +1 moreApache EventMesh Runtime: SSRF6.3 Medium
- mobile industrial robots mir fleet, mir robots +1 moreInformation Disclosure in MiR robots and MiR fleet through verbose error pages5.3 Medium
- pik online yazılım çözümleri a.ş. onlineIDOR in PozitifIK's Pik Online7.5 High
- mobile industrial robots mir fleet, mir robots +1 moreInsufficient authorization when creating notes4.3 Medium
- pik online yazılım çözümleri a.ş. onlineSSRF in PozitifIK's Pik Online8.6 High
- ads.txt guru connectWordPress ads.txt Guru Connect Plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability9.6 Critical
- wen solutions notice barWordPress Notice Bar Plugin <= 3.1.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- dexignzone jobzilla - job board wordpress themeWordPress JobZilla - Job Board WordPress Theme Theme <= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability8.8 High
- fetch designs sign-up sheetsWordPress Sign-up Sheets Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- themifyme themify iconsWordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- themifyme themify audio dockWordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- noor alam colorbox lightboxWordPress Colorbox Lightbox Plugin <= 1.1.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- themifyme themify builderWordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability4.3 Medium
- basix nex-formsWordPress NEX-Forms Plugin <= 9.1.3 - Cross Site Request Forgery (CSRF) Vulnerability8.8 High
- favethemes houzezWordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability8.5 High
- osama.esh wp visitor statistics (real time traffic)WordPress WP Visitor Statistics (Real Time Traffic) Plugin <= 8.2 - Cross Site Scripting (XSS) Vulnerability9.8 Critical
- wpdeveloper templatelyWordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability10.0 Critical
- thimpress wp pipesWordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability7.1 High
- infility globalWordPress Infility Global <= 2.15.06 - Arbitrary File Download vulnerability6.5 Medium
- saifumak add custom codesWordPress Add Custom Codes <= 4.80 - Arbitrary Code Execution vulnerability7.5 High
- brewlabs sensorpressWordPress SensorPress plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability9.8 Critical
- vikas sharma iframe blockWordPress iFrame Block plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- imran emu tc testimonialsWordPress TC Testimonials plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability10.0 Critical
- highwarden super store finderWordPress Super Store Finder Plugin <= 7.6 - Reflected Cross Site Scripting (XSS) Vulnerability7.1 High
- numixtech page transitionWordPress Page Transition plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- themepassion support ticketWordPress Support Ticket Plugin <= 1.9 - Privilege Escalation Vulnerability9.8 Critical
- themepassion ultra portfolioWordPress Ultra Portfolio - WordPress Plugin <= 6.7 - Cross Site Scripting (XSS) Vulnerability7.1 High
- themepassion support ticketWordPress Support Ticket Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability7.1 High
- dourou cookie warningWordPress Cookie Warning plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability7.5 High
- dahz kitringWordPress Kitring Theme <= 2.8 - Local File Inclusion Vulnerability8.1 High
- axiomthemes cars4rentWordPress Cars4Rent Theme <= 1.4.2 - PHP Object Injection Vulnerability9.8 Critical
- max chirkov simple login logWordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability8.1 High
- cocobasic anotteWordPress Anotte theme <= 1.8 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…