CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- ninjateam filebird – wordpress media library folders & file managerFileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering4.3 Medium
- wpchill modula image gallery – photo grid & video galleryImage Gallery – Photo Grid & Video Gallery <= 2.13.3 - Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification4.3 Medium
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode6.4 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Sc…6.4 Medium
- caterhamcomputing cc child pagesCC Child Pages <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcode6.4 Medium
- apache airflowApache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI6.5 Medium
- zohocorp manageengine admanager plusNTLM Hash Exposure Vulnerability6.4 Medium
- elastic elasticsearchElasticsearch Improper Authentication6.8 Medium
- libreofficeTCC Bypass via Inherited Permissions in Bundled Interpreter0.9 Low
- elastic kibanaKibana Cross-site Scripting via the Integration Package Upload Functionality5.4 Medium
- fantasticlbp hotels serverFantasticLBP Hotels Server hotelList.php sql injection6.9 Medium
- fantasticlbp hotels serverFantasticLBP Hotels Server OrderList.php sql injection6.9 Medium
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow9.3 Critical
- line corporation client for ios, linecorp line +1 moreLINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the...3.1 Low
- line corporation client for ios, linecorp line +1 moreLINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS...7.7 High
- line corporation client for ios, linecorp line +1 moreThe in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar...4.3 Medium
- line corporation client for android, linecorp line +1 moreLINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in...5.4 Medium
- line corporation client for android, linecorp line +1 moreLINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app...3.4 Low
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 WIREDCFGGET http_eshell_server buffer overflow9.3 Critical
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injection9.3 Critical
- unknown url shortifyURL Shortify < 1.11.4 - Reflected XSS7.1 High
- unknown url shortifyURL Shortify < 1.11.3 - Reflected XSS7.1 High
- unknown royal addons for elementorRoyal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload5.3 Medium
- jheng gao student learning assessment and support systemJHENG GAO｜Student Learning Assessment and Support System - Exposure of Sensitive Information8.7 High
- eclipse omrOMR on Z processors Exposing a possible buffer over-read problem6.9 Medium
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 NETREBOOT http_eshell_server command injection9.3 Critical
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 SHARESERVER Feature command injection9.3 Critical
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 API eshell path traversal6.9 Medium
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 POST Message fsnotify improper authentication6.9 Medium
- smartbit commv smartschool appSmartbit CommV Smartschool App be.smartschool.mobile.SplashActivity path traversal4.8 Medium
- mispIn MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow...5.4 Medium
- someguy9 lightweight accordionLightweight Accordion <= 1.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- municorn fax appMunicorn FAX App biz.faxapp.app path traversal4.8 Medium
- atlaszz ai photo team galleryit appatlaszz AI Photo Team Galleryit App gallery.photogallery.pictures.vault.album path traversal4.8 Medium
- shenzhen sixun software sixun shanghui group business management systemShenzhen Sixun Software Sixun Shanghui Group Business Management System ExportFiles file access6.3 Medium
- shenzhen sixun software sixun shanghui group business management systemShenzhen Sixun Software Sixun Shanghui Group Business Management System UpdatePasswordBatch password recovery6.9 Medium
- samunatsu halobotSamuNatsu HaloBot Inter-plugin API index.js html_renderer dynamically-managed code resources5.3 Medium
- ketr jepaasketr JEPaaS readAllPostil sql injection5.1 Medium
- ugreen dh2100+Ugreen DH2100+ USB symlink7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreNetworkmanager: networkmanager file access3.3 Low
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A hardcoded Flickr API key...4.7 Medium
- hitrontech hi3120 firmwareAn issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information...5.5 Medium
- getgrav gravGrav may be vulnerable to SSRF attack via Twig Templates9.1 Critical
- getgrav gravGrav is vulnerable to Stored XSS through authenticated user-edited content5.4 Medium
- frappe erpnextAn issue was discovered in Frappe ERPNext through 15.89.0. Function...8.8 High
- frappe erpnextAn issue was discovered in Frappe ERPNext through 15.89.0. Function...8.8 High
- frappe erpnextA Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89...8.8 High
- frappe erpnextAn SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method...8.8 High
- frappe erpnextAn SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions...4.3 Medium
- frappe erpnextAn SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method...4.3 Medium
- Show moreLoading…