CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- ibm watson studio on cloud pak for data, watson assistant for ibm cloud pak for data +1 moreIBM Watson Studio on Cloud Pak for Data cross-site scripting5.4 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to insecure folder permissions. The following products are...7.8 High
- suse neuvectorNeuVector admin account has insecure default password9.8 Critical
- suse neuvectorNeuVector process with sensitive arguments lead to leakage5.3 Medium
- suse neuvectorNeuVector has an insecure password storage vulnerable to rainbow attack5.3 Medium
- tomtretbar dell powerscaleLack of TLS validation in plugin Dell Powerscale on Checkmk Exchange6.9 Medium
- tomtretbar vmware vsanLack of TLS validation in plugin VMware vSAN on Checkmk Exchange6.9 Medium
- pawelko freebox v6 agentLack of TLS validation in plugin Freebox v6 agent on Checkmk Exchange6.9 Medium
- heinlein-support check mk python apiLack of TLS validation in plugin check-mk-api on Checkmk Exchange6.9 Medium
- oetiker bgp monitoringLack of TLS validation in plugin BGP Monitoring on Checkmk Exchange6.9 Medium
- magepeopleteam wpeventlyWordPress WpEvently Plugin <= 4.4.8 - PHP Object Injection Vulnerability8.8 High
- nootheme jobmonsterWordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability9.8 Critical
- bplugins b sliderWordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability5.8 Medium
- all bootstrap blocks bootstrap blocks, miles all bootstrap blocks +1 moreWordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control Vulnerability6.5 Medium
- emarket-design youtube showcaseWordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability8.1 High
- uxper goloWordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability9.8 Critical
- uxper goloWordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- steelthemes nest addonsWordPress Nest Addons Plugin <= 1.6.3 - SQL Injection Vulnerability9.3 Critical
- ovatheme irecaWordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability8.1 High
- dylan james zephyr project managerWordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability7.1 High
- bplugins tiktok feedWordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control Vulnerability7.1 High
- extendons woocommerce csv import exportWordPress WooCommerce csv import export Plugin <= 2.0.6 - Arbitrary File Deletion Vulnerability7.7 High
- dmitry v. (ceo of "ukr solution") upc/ean/gtin code generatorWordPress UPC/EAN/GTIN Code Generator Plugin <= 2.0.2 - Arbitrary File Deletion Vulnerability7.7 High
- emarket-design wp ticket customer service software & support ticket systemWordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability8.1 High
- emarket-design employee spotlightWordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability8.1 High
- captcha.euWordPress Captcha.eu Plugin < 1.0.61 - Cross Site Scripting (XSS) Vulnerability7.1 High
- gavias kipsoWordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability8.1 High
- ovatheme eventsWordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability8.1 High
- emarket-design wp easy contactWordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability8.1 High
- ashan perera lifepressWordPress LifePress plugin <= 2.1.3 - Broken Access Control vulnerability5.4 Medium
- tielabs jannahWordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability8.1 High
- assaf parag poll, survey & quiz maker plugin by opinion stageWordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability7.5 High
- codeyatri gutenifyWordPress Gutenify Plugin <= 1.5.4 - Local File Inclusion Vulnerability7.5 High
- jason theme blvd widget areasWordPress Theme Blvd Widget Areas Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- chartbeatWordPress Chartbeat Plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability6.4 Medium
- unfoldwp magazineWordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability8.1 High
- wpinterface blogmarksWordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability8.1 High
- unfoldwp magazine eliteWordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability8.1 High
- emarket-design employee directory – staff listing & team directory plugin for wordpressWordPress Employee Directory – Staff Listing & Team Directory plugin for WordPress plugin <= 4.5.5 - PHP Object Injection vulnerability8.1 High
- honzat page manager for elementorWordPress Page Manager for Elementor Plugin <= 2.0.5 - Broken Access Control Vulnerability7.6 High
- unfoldwp magazine sagaWordPress Magazine Saga Theme <= 1.2.7 - Local File Inclusion Vulnerability8.1 High
- eboekhouden e-boekhouden.nlWordPress e-Boekhouden.nl Plugin <= 1.9.3 - Cross Site Scripting (XSS) Vulnerability7.1 High
- koen schuit nextgen gallery searchWordPress NextGEN Gallery Search Plugin <= 2.12 - Cross Site Scripting (XSS) Vulnerability7.1 High
- undoit theme switcher reloadedWordPress Theme Switcher Reloaded Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- xmasb quotesWordPress XmasB Quotes Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- themeuniver glamerWordPress Glamer Theme <= 1.0.2 - Local File Inclusion Vulnerability8.1 High
- 8bitkid yahoo! webplayerWordPress Yahoo! WebPlayer Plugin <= 2.0.6 - Cross Site Scripting (XSS) Vulnerability7.1 High
- manfcarlo wp funnel managerWordPress WP Funnel Manager Plugin <= 1.4.0 - PHP Object Injection Vulnerability9.8 Critical
- favethemes houzezWordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability8.8 High
- favethemes houzezWordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability4.3 Medium
- Show moreLoading…