CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- campay woocommerce payment gatewayCampay Woocommerce Payment Gateway <= 1.2.2 - Unauthenticated Payment Bypass5.3 Medium
- andru1 complagComplag <= 1.0.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']6.1 Medium
- nazsabuz wp dropzoneWP Dropzone <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'callback' Shortcode Attribute6.4 Medium
- awanhrp wpik wordpress basic ajax formWpik WordPress Basic Ajax Form <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- ayothemes ayo shortcodesAyo Shortcodes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute6.4 Medium
- watchtowerhqWatchTowerHQ <= 3.16.0 - Authenticated (Administrator+) Arbitrary File Read via 'wht_download_big_object_origin' Parameter4.9 Medium
- wpjobportal wp job portal – ai-powered recruitment system for company or job board websiteWP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field4.4 Medium
- cytechltd buddytaskBuddyTask <= 1.3.0 - Missing Authorization to Authenticated (Subscriber+) Cross-Group Task Board Access and Manipulation5.4 Medium
- stiand vimeo simplegalleryVimeo SimpleGallery <= 0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification4.3 Medium
- tmus simple nivo sliderSimple Nivo Slider <= 0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4 Medium
- looks awesome flow-flow social feed streamFlow-Flow Social Feed Stream 3.0.0 - 4.7.5 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via flow_flow_social_auth AJAX action6.4 Medium
- magblogapi bmlt wordpress satelliteBMLT WordPress Plugin <= 3.11.4 - Cross-Site Request Forgery to Settings Creation and Deletion4.3 Medium
- asustor adm, data master +1 moreA missing encryption of sensitive data vulnerability was found in the UPS settings of ADM7.0 High
- altera high level synthesis compilerHigh Level Synthesis Compiler Security Advisory5.4 Medium
- asustor adm, data master +1 moreAn improper certificates validation vulnerability was found in the Notification settings of ADM7.0 High
- altera high level synthesis compilerHigh Level Synthesis Compiler Security Advisory5.4 Medium
- cvedovini lt unleashedLT Unleashed <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion via 'template' Parameter7.5 High
- jenyay ljusersLJUsers <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute6.4 Medium
- altera quartus prime standard, intel quartus prime +1 moreQuartus Prime Standard Security Advisory5.4 Medium
- insyde software insydeh2oH19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)8.2 High
tzdataDebiantzdata - new timezone databaseNo score- weaviateWeaviate OSS has path traversal vulnerability via the Shard Movement API4.9 Medium
- weaviateWeaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip7.2 High
- jishenghua jsherpjshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the ...4.6 Medium
- ruoyiRuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu...4.6 Medium
- jishenghua jsherpjshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability...4.6 Medium
- pleskPlesk 18.0 has Incorrect Access Control.9.1 Critical
- mineadminMineAdmin has an insecure default password9.8 Critical
- cloudlinux ai-bolitAn eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4...8.8 High
- nextcloud serverNextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core...4.3 Medium
- google chromeInappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110...4.3 Medium
- google chromeUse after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote...6.1 Medium
- malwarebytesMalwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows...3.3 Low
- facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 moreDenial of Service Vulnerability in React Server Components7.5 High
- spacex starlink dishSpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow...4.2 Medium
- danny-avila librechatLibreChat's lack of JSON parsing error handling can lead to XSS5.3 Medium
- vercel next.jsNext.js: Unbounded postponed resume buffering can lead to DoS6.9 Medium
- vercel next.jsNext.js: null origin can bypass Server Actions CSRF checks5.3 Medium
- vercel next.jsNext.js: null origin can bypass dev HMR websocket CSRF checks2.3 Low
- vercel next, next.js +1 moreNext.js has Unbounded Memory Consumption via PPR Resume Endpoint5.9 Medium
- vercel next, next.js +1 moreNext.js Vulnerable to Denial of Service with Server Components5.9 Medium
- vercel next.jsNext.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications6.3 Medium
- vercel next.jsNext.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service6.3 Medium
- vercel next.jsNext.js: Unauthenticated Remote Code Execution on windows-hosted servers9.0 Critical
- vercel next.jsNext.js: Response Body Cache Confusion for Requests Containing Bodies6.0 Medium
- vercel next.jsNext.js: Denial of Service in App Router using Server Actions8.2 High
- vercel next.jsNext.js: Cache poisoning via collisions in React Server Component cache-busting3.7 Low
- danny-avila librechatLibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes5.3 Medium
- danny-avila librechatLibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload8.6 High
- altera quartus prime pro, intel quartus prime +1 moreQuartus Prime Pro Edition Advisory5.4 Medium
- Show moreLoading…