CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows SMB Client Remote Code Execution Vulnerability4.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft powershell, powershell 7.4, powershell 7.5 +24 more +26 morePowerShell Direct Elevation of Privilege Vulnerability7.0 High
- adobe coldfusionColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)10.0 Critical
- prebid prebid.jsPrebid.js NPM package briefly compromised8.6 High
- adobe experience managerAdobe Experience Manager | Improper Input Validation (CWE-20)4.9 Medium
- adobe experience managerAdobe Experience Manager | Improper Input Validation (CWE-20)6.5 Medium
- adobe experience managerAdobe Experience Manager | Incorrect Authorization (CWE-863)6.5 Medium
- adobe experience managerAdobe Experience Manager | Improper Input Validation (CWE-20)7.7 High
- adobe experience managerAdobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)4.3 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)6.5 Medium
- equalize digital accessibility checker by equalize digitalWordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability4.3 Medium
- helmut wandl advanced settingsWordPress Advanced Settings Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wp swings pdf generator for wordpressWordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability5.3 Medium
- rhys wynne wp ebay product feedsWordPress WP eBay Product Feeds Plugin <= 3.4.8 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- berqwpWordPress BerqWP Plugin <= 2.2.53 - Broken Access Control Vulnerability5.3 Medium
- equalize digital accessibility checker by equalize digitalWordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability5.4 Medium
- recorp export wp page to static html/cssWordPress Export WP Page to Static HTML/CSS Plugin <= 4.1.0 - Broken Access Control Vulnerability5.3 Medium
- pixeline pixeline's email protectorWordPress Pixeline's Email Protector Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- info@welcart welcart e-commerceWordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- stefano lissa include meWordPress Include Me Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- wpfactory additional custom product tabs for woocommerceWordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- antoineh football poolWordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- joe dolson my ticketsWordPress My Tickets Plugin <= 2.0.22 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- silverplugins217 dynamic text field for contact form 7WordPress Dynamic Text Field For Contact Form 7 Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- cristiano zanca woocommerce booking bundle hoursWordPress WooCommerce Booking Bundle Hours Plugin <= 0.7.4 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- themeum tutor lmsWordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability7.6 High
- devitems shoplentorWordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- frenify mowWordPress Mow Theme <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability9.6 Critical
- zhenshi mibro fit appZhenShi Mibro Fit App com.xiaoxun.xunoversea.mibrofit AndroidManifest.xml improper export of android application components4.8 Medium
- 51mis lingdang crmShanghai Lingdang Information Technology Lingdang CRM index_event.php server-side request forgery6.9 Medium
- thememove coreWordPress ThemeMove Core Plugin <= 1.4.2 - PHP Object Injection Vulnerability8.8 High
- gavias zistonWordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability8.1 High
- webdevstudios constant contact for wordpressWordPress Constant Contact for WordPress Plugin <= 4.1.1 - PHP Object Injection Vulnerability8.8 High
- fwdesign ultimate video playerWordPress Ultimate Video Player Plugin <= 10.1 - Server Side Request Forgery (SSRF) Vulnerability7.2 High
- alexandre froger wp weixinWordPress WP Weixin plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- awesomesupport awesome supportWordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerability5.3 Medium
- spoddev2021 spreadconnectWordPress Spreadconnect plugin <= 2.1.5 - Broken Access Control Vulnerability5.4 Medium
- laborator kaliumWordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability5.3 Medium
- uxper salaWordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability8.1 High
- hossein material dashboardWordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability9.8 Critical
- convers lab wp smartpayWordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability7.5 High
- nebojsa target video easy publishWordPress Target Video Easy Publish plugin <= 3.8.9 - Arbitrary Code Execution vulnerability5.4 Medium
- Show moreLoading…