CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- muniyandibg qnotsquizqnotsquiz <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- edge-themes edge cptWordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability8.1 High
- jma plugins woocommerce designer proWooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload9.8 Critical
- best practical request trackerStored XSS in Request Tracker5.3 Medium
- unknown jeg kit for elementorJeg Elementor Kit < 2.7.0 - Author+ Stored XSS6.8 Medium
- unknown orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & moreOrbit Fox < 3.0.2 - Author+ Server-Side Request Forgery5.5 Medium
- unknown pixelyoursitePixelYourSite < 11.1.2 - Admin+ LFI2.7 Low
- implem inc. pleasanterPleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments...4.8 Medium
- implem inc. pleasanterPleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which...5.1 Medium
libwebpOSS-FuzzUse-of-uninitialized-value in AlphaReplace_SSE2No score- No product listedImproper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying...6.5 Medium
- microweberMicroweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum...8.3 High
- openenergymonitor emoncmsEmoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that...7.5 High
- openenergymonitor emoncmsEmoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerability...6.1 Medium
- No product listedAntabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code...9.8 Critical
- jishenghua jsherpjshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution ...8.2 High
- perfree perfreeblogPerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function7.6 High
- perfree perfreeblogPerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function7.6 High
- perfree perfreeblogPerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function7.6 High
- perfree perfreeblogPerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function5.3 Medium
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...9.8 Critical
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...9.8 Critical
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...9.8 Critical
- dlink dir-600l firmwareD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime...7.5 High
- No product listedAn issue was discovered in the NDIS Usermode IO driver (RtkIOAC60.sys, version 6.0.5600.16348)...6.2 Medium
- No product listedAn issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows...6.8 Medium
- No product listedAn Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to obtain...6.2 Medium
- No product listedThe Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untrusted...8.2 High
- No product listedIn Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege...5.3 Medium
- boldthemes bold page builderBold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter6.4 Medium
- Show moreLoading…