CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- epsiloncool wp fast total searchWordPress WP Fast Total Search Plugin <= 1.79.270 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- jeff starr simple statistics for feedsWordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wpecommerce recurring paypal donationsWordPress Recurring PayPal Donations Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- pierre lannoy sessionsWordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- nootheme jobmonsterWordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability5.3 Medium
- nootheme jobmonsterWordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- equalize digital accessibility checker by equalize digitalWordPress Accessibility Checker by Equalize Digital Plugin <= 1.30.0 - Insecure Direct Object References (IDOR) Vulnerability5.4 Medium
- shahjahan jewel fluent supportWordPress Fluent Support Plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wpsoul greenshiftWordPress Greenshift Plugin <= 12.1.1 - Broken Access Control Vulnerability4.3 Medium
- uniong webitrUniong｜WebITR - Arbitrary File Reading through Path Traversal7.1 High
- uniong webitrUniong｜WebITR - Arbitrary File Reading through Path Traversal7.1 High
- uniong webitrUniong｜WebITR - Arbitrary File Reading through Path Traversal7.1 High
- uniong webitrUniong｜WebITR - Arbitrary File Reading through Path Traversal7.1 High
- uniong webitrUniong｜WebITR - SQL Injection8.7 High
- uniong webitrUniong｜WebITR - Missing Authentication9.3 Critical
- themegrill spaciousSpacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Import4.3 Medium
- legion of the bouncy castle inc. bouncy castle for javanative encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.0.0 None
- legion of the bouncy castle inc. bouncy castle for java fips, bouncy castle for java lts +1 moreGarbage collection can delay for AES CBC Native support, resulting in heap exhaustion5.9 Medium
- western digital corporation digital kitfox for windowsWestern Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows...8.4 High
- boybawang wp talrooWP Talroo <= 2.4 - Reflected XSS7.1 High
- danfoss ak-sm8xxa seriesPost auth nginx configuration injection in Danfoss AK-SM8xxA Series6.8 Medium
- danfoss ak-sm8xxa seriesPost-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series8.7 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal's Unlimited File Upload Could Result in DoS5.3 Medium
qemuDebianqemu - security updateNo score- dlink di-7400g\+ firmwareThe DI-7400G+ router has a command injection vulnerability, which allows attackers to execute...9.8 Critical
- reolink smart 2k\+ plug-in wi-fi video doorbell with chime firmwareReolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was...9.8 Critical
- reolink smart 2k\+ plug-in wi-fi video doorbell with chime firmwareIncorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video...7.5 High
- No product listedReolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was...4.0 Medium
- reolink smart 2k\+ plug-in wi-fi video doorbell with chime firmwareA discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi...7.3 High
- No product listedInsecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0...6.5 Medium
- No product listedInsufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime ...5.3 Medium
- No product listedAn Insecure Direct Object Reference (IDOR) vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video...5.3 Medium
- reolinkAn open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users...6.3 Medium
- reolinkAn intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers...5.3 Medium
- reolinkAn issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass...5.4 Medium
- reolinkReolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to...6.5 Medium
- reolinkAn Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows...6.5 Medium
- reolinkA cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0...6.1 Medium
- reolinkReolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and...9.8 Critical
- tenda o3 firmwareTenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function...9.8 Critical
- dlink dir-619l firmwareD-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via...7.5 High
- tenda ax3 firmwareTenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function...7.5 High
- tenda ax3 firmwareTenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function...7.5 High
- tenda ax3 firmwareTenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the...7.5 High
- dlink dir-619l firmwareD-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the...7.5 High
- dlink dir-619l firmwareD-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formWlanSetup function via the...7.5 High
- dlink dcs-825l firmwareD-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure...7.3 High
- newapi new apiQuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).8.8 High
- dootaskDooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via...3.5 Low
- dootaskAn authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask...8.8 High
- Show moreLoading…