Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2025

191 records · 15 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

  • CVE-2025-26543
    28Monitor

    WordPress Simple Responsive Menu plugin <= 2.1 - CSRF to Stored XSS vulnerability

    HighCVSS 7.1Proof of conceptEPSS 0%

    pukhraj suthar · simple responsive menuFeb 13, 2025

  • CVE-2024-12013
    30Monitor

    A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h.

    HighCVSS 7.6No exploitEPSS 0%

    zettler · 130.8005Feb 13, 2025

  • CVE-2024-57378
    29Monitor

    Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability.

    HighCVSS 7.3Proof of conceptEPSS 0%

    Feb 13, 2025

  • CVE-2025-22896
    60This week

    mySCADA myPRO Manager Cleartext Storage of Sensitive Information

    CriticalCVSS 9.2WeaponizedEPSS 3%

    myscada · myproFeb 13, 2025

  • CVE-2025-24865
    60This week

    mySCADA myPRO Manager Missing Authentication for Critical Function

    CriticalCVSS 10.0WeaponizedEPSS 7%

    myscada · myproFeb 13, 2025

  • CVE-2024-54951
    21Monitor

    Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS).

    MediumCVSS 5.4Proof of conceptEPSS 0%

    monicahq · monicaFeb 13, 2025

  • CVE-2025-26788
    33Monitor

    StrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a discoverable transaction.

    HighCVSS 8.4Proof of conceptEPSS 0%

    strongkey · fido serverFeb 14, 2025

  • CVE-2024-57725
    28Monitor

    An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication,

    MediumCVSS 6.5Proof of conceptEPSS 6%

    Feb 14, 2025

  • CVE-2024-57778
    35Monitor

    An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from st

    HighCVSS 8.8Proof of conceptEPSS 0%

    Feb 14, 2025

  • CVE-2025-25296
    25Monitor

    Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint

    MediumCVSS 6.1Proof of conceptEPSS 1%

    humansignal · label studioFeb 14, 2025

  • CVE-2025-1302
    38Monitor

    Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization.

    HighCVSS 8.9Proof of conceptEPSS 10%

    Feb 15, 2025

  • CVE-2024-13513
    39Monitor

    Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    oliverpos · oliver posFeb 15, 2025

  • CVE-2024-13488
    30Monitor

    LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 1%

    enituretechnology · ltl freight quotesFeb 15, 2025

  • CVE-2025-26793
    38Monitor

    The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (usern

    CriticalCVSS 9.3Proof of conceptEPSS 2%

    hirsch · enterphone meshFeb 15, 2025

  • CVE-2025-1337
    20Monitor

    Eastnets PaymentSafe BIC Search cross site scripting

    MediumCVSS 5.1Proof of conceptEPSS 0%

    eastnets · paymentsafeFeb 16, 2025

  • CVE-2025-1338
    42Plan

    NUUO Camera handle_config.php print_file command injection

    MediumCVSS 6.9Proof of conceptEPSS 51%

    nuuo · cameraFeb 16, 2025

  • CVE-2025-1340
    39Monitor

    TOTOLINK X18 cstecgi.cgi setPasswordCfg stack-based overflow

    HighCVSS 8.7No exploitEPSS 16%

    totolink · x18 firmwareFeb 16, 2025

  • CVE-2025-0924
    24Monitor

    WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 1%

    melapress · wp activity logFeb 17, 2025

  • CVE-2024-13625
    28Monitor

    Tube Video Ads Lite <= 1.5.7 - Reflected XSS

    HighCVSS 7.1Proof of conceptEPSS 0%

    gualdoni · tube video ads liteFeb 17, 2025

  • CVE-2024-13627
    18Monitor

    WP Touch Slider <= 2.2 - Reflected XSS

    MediumCVSS 4.7Proof of conceptEPSS 0%

    wp-buy · owl carousel sliderFeb 17, 2025

  • CVE-2024-13726
    35Monitor

    Themes Coder <= 1.3.4 - Unauthenticated SQLi

    HighCVSS 8.6Proof of conceptEPSS 1%

    themescoder · themes coderFeb 17, 2025

  • CVE-2024-13609
    23Monitor

    1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backu

    MediumCVSS 5.9Proof of conceptEPSS 1%

    1clickmigration · 1 click migrationFeb 18, 2025

  • CVE-2025-1023
    38Monitor

    SQL Injection in ChurchCRM newCountName Parameter via EditEventTypes.php

    CriticalCVSS 9.3Proof of conceptEPSS 2%

    churchcrm · churchcrmFeb 18, 2025

  • CVE-2025-1035
    25Monitor

    Path Traversal in Komtera Technolgies' KLog Server

    MediumCVSS 5.7Proof of conceptEPSS 9%

    komtera technolgies · klog serverFeb 18, 2025

  • CVE-2024-57045
    49Plan

    A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authen

    CriticalCVSS 9.8Proof of conceptEPSS 32%

    dlink · dir-859 a3 firmwareFeb 18, 2025

  • CVE-2024-57046
    36Monitor

    A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the aut

    HighCVSS 8.8Proof of conceptEPSS 2%

    netgear · dgn2200 firmwareFeb 18, 2025

  • CVE-2024-56882
    21Monitor

    Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS).

    MediumCVSS 5.4Proof of conceptEPSS 0%

    sagedpw · sage dpwFeb 18, 2025

  • CVE-2024-56883
    32Monitor

    Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control.

    HighCVSS 8.1Proof of conceptEPSS 0%

    sagedpw · sage dpwFeb 18, 2025

  • CVE-2025-26465
    29Monitor

    Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

    MediumCVSS 6.8Proof of conceptEPSS 7%

    openbsd · opensshFeb 18, 2025

  • CVE-2024-13489
    30Monitor

    LTL Freight Quotes – Old Dominion Edition <= 4.2.10 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 0%

    eniture · ltl freight quotesFeb 19, 2025

  • CVE-2024-13478
    30Monitor

    LTL Freight Quotes – TForce Edition <= 3.6.4 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 1%

    eniture · ltl freight quotesFeb 19, 2025

  • CVE-2024-13479
    30Monitor

    LTL Freight Quotes – SEFL Edition <= 3.2.4 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 0%

    eniture · ltl freight quotesFeb 19, 2025

  • CVE-2024-13481
    30Monitor

    LTL Freight Quotes – R+L Carriers Edition <= 3.3.4 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 0%

    eniture · ltl freight quotesFeb 19, 2025

  • CVE-2024-13483
    30Monitor

    LTL Freight Quotes – SAIA Edition <= 2.2.10 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 0%

    eniture · ltl freight quotesFeb 19, 2025

  • CVE-2024-13485
    30Monitor

    LTL Freight Quotes – ABF Freight Edition <= 3.3.7 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 1%

    eniture · ltl freight quotesFeb 19, 2025

  • CVE-2025-24989
    69This week

    Microsoft Power Pages Elevation of Privilege Vulnerability

    CriticalCVSS 9.8KEVWeaponizedEPSS 1%

    microsoft · power pagesFeb 19, 2025

  • CVE-2024-12284
    39Monitor

    Authenticated privilege escalation

    HighCVSS 8.8No exploitEPSS 13%

    citrix · netscaler agentFeb 19, 2025

  • CVE-2025-27218
    60This week

    Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserializa

    MediumCVSS 5.3WeaponizedEPSS 65%

    Feb 20, 2025

  • CVE-2024-13888
    24Monitor

    WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter

    MediumCVSS 6.1Proof of conceptEPSS 0%

    amauri · wpmobile.appFeb 20, 2025

  • CVE-2025-0868
    42Plan

    Remote Code Execution in DocsGPT

    CriticalCVSS 9.3Proof of conceptEPSS 17%

    arc53 · docsgptFeb 20, 2025

  • CVE-2024-55457
    27Monitor

    MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService.

    MediumCVSS 6.5Proof of conceptEPSS 3%

    Feb 20, 2025

  • CVE-2025-25968
    24Monitor

    DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability.

    MediumCVSS 6.0Proof of conceptEPSS 0%

    ddsn · cm3 acora content management systemFeb 20, 2025

  • CVE-2025-24893
    99Now

    Remote code execution as guest via SolrSearchMacros request in xwiki

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    xwiki · xwikiFeb 20, 2025

  • CVE-2024-54756
    40Plan

    A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    Feb 20, 2025

  • CVE-2025-1489
    21Monitor

    WP-Appbox <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via appbox Shortcode

    MediumCVSS 5.4Proof of conceptEPSS 0%

    tchgdns · wp-appboxFeb 21, 2025

  • CVE-2025-26794
    62This week

    Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection.

    CriticalCVSS 9.8Proof of conceptEPSS 77%

    exim · eximFeb 21, 2025

  • CVE-2025-26014
    39Monitor

    A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    olajowon · loggroveFeb 21, 2025

  • CVE-2019-8900
    48Plan

    A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute arbitrary code upon

    MediumCVSS 6.8Proof of conceptEPSS 69%

    apple · secureromFeb 21, 2025

  • CVE-2025-1361
    21Monitor

    IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function

    MediumCVSS 5.3Proof of conceptEPSS 1%

    ip2location · country blockerFeb 22, 2025

  • CVE-2024-13869
    29Monitor

    Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file

    HighCVSS 7.2Proof of conceptEPSS 2%

    wpvivid · wpvivid backup \& migrationFeb 22, 2025

  • CVE-2025-1595
    27Monitor

    Anhui Xufan Information Technology EasyCVR getbaseconfig information disclosure

    MediumCVSS 6.9Proof of conceptEPSS 1%

    anhui xufan information technology · easycvrFeb 23, 2025

  • CVE-2025-1608
    24Monitor

    LB-LINK AC1900 Router set_manpwd websGetVar os command injection

    MediumCVSS 5.3No exploitEPSS 10%

    lb-link · ac1900 firmwareFeb 23, 2025

  • CVE-2025-1609
    24Monitor

    LB-LINK AC1900 Router set_cmd websGetVar os command injection

    MediumCVSS 5.3No exploitEPSS 10%

    lb-link · ac1900 firmwareFeb 23, 2025

  • CVE-2025-1610
    25Monitor

    LB-LINK AC1900 Router set_blacklist websGetVar os command injection

    MediumCVSS 5.3No exploitEPSS 13%

    lb-link · ac1900 firmwareFeb 23, 2025

  • CVE-2025-25279
    37Monitor

    Arbitrary file read in Mattermost Boards via import & export board archive

    HighCVSS 7.5Proof of conceptEPSS 24%

    mattermost · mattermost serverFeb 24, 2025

  • CVE-2025-0690
    24Monitor

    Grub2: read: integer overflow may lead to out-of-bounds write

    MediumCVSS 6.1Proof of conceptEPSS 0%

    red hat · red hat enterprise linux 9Feb 24, 2025

  • CVE-2025-25460
    19Monitor

    A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature.

    MediumCVSS 4.8Proof of conceptEPSS 0%

    flatpress · flatpressFeb 24, 2025

  • CVE-2024-54820
    39Monitor

    XOne Web Monitor v02.10.2024.530 framework 1.0.4.9 was discovered to contain a SQL injection vulnerability in the login page.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    Feb 24, 2025

  • CVE-2025-27112
    27Monitor

    Navidrome has authentication bypass in Subsonic API with non-existent username

    MediumCVSS 6.9Proof of conceptEPSS 0%

    navidrome · navidromeFeb 24, 2025

  • CVE-2025-27364
    48Plan

    In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant

    CriticalCVSS 10.0No exploitEPSS 25%

    mitre · calderaFeb 24, 2025

  • CVE-2025-26529
    24Monitor

    Stored XSS risk in admin live log

    MediumCVSS 6.1Proof of conceptEPSS 0%

    moodle · moodleFeb 24, 2025

  • CVE-2025-1128
    52Plan

    Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion

    CriticalCVSS 9.8No exploitEPSS 42%

    wpeverest · everest formsFeb 25, 2025

  • CVE-2022-49186
    31Monitor

    clk: visconti: prevent array overflow in visconti_clk_register_gates()

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelFeb 26, 2025

  • CVE-2024-10152
    28Monitor

    Simple Certain Time to Show Content < 1.3.1 - Reflected XSS

    HighCVSS 7.1Proof of conceptEPSS 0%

    elementengage · simple certain time to show contentFeb 26, 2025

  • CVE-2024-12737
    24Monitor

    WP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSS

    MediumCVSS 6.1Proof of conceptEPSS 0%

    wp-base · wp base booking of appointments\, services and eventsFeb 26, 2025

  • CVE-2024-12878
    28Monitor

    Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS

    HighCVSS 7.1Proof of conceptEPSS 0%

    thedevoice · lazy blocksFeb 26, 2025

  • CVE-2024-13624
    28Monitor

    WPMovieLibrary <= 2.1.4.8 - Reflected XSS

    HighCVSS 7.1Proof of conceptEPSS 0%

    caercam · wpmovielibraryFeb 26, 2025

  • CVE-2024-13628
    24Monitor

    WP Pricing Table <= 1.1 - Reflected XSS

    MediumCVSS 6.1Proof of conceptEPSS 0%

    codecabin · wp pricing tableFeb 26, 2025

  • CVE-2024-13630
    24Monitor

    News List <= 1.0 - Reflected XSS

    MediumCVSS 6.1Proof of conceptEPSS 0%

    mahinsha · newstickerFeb 26, 2025

  • CVE-2024-13634
    24Monitor

    Post Sync <= 1.1 - Reflected XSS

    MediumCVSS 6.1Proof of conceptEPSS 0%

    wphobby · post syncFeb 26, 2025

  • CVE-2024-47051
    40Plan

    Remote Code Execution & File Deletion in Asset Uploads

    CriticalCVSS 9.9Proof of conceptEPSS 1%

    acquia · mauticFeb 26, 2025

  • CVE-2024-47053
    30Monitor

    Improper Authorization in Reporting API

    HighCVSS 7.7No exploitEPSS 0%

    acquia · mauticFeb 26, 2025

  • CVE-2025-1716
    22Monitor

    picklescan - Security scanning bypass via 'pip main'

    MediumCVSS 5.3Proof of conceptEPSS 1%

    mmaitre314 · picklescanFeb 26, 2025

  • CVE-2024-57040
    39Monitor

    TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password f

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    tp-link · tl-wr845n firmwareFeb 26, 2025

  • CVE-2025-21756
    31Monitor

    vsock: Keep the binding until socket destruction

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelFeb 27, 2025

  • CVE-2025-21758
    27Monitor

    ipv6: mcast: add RCU protection to mld_newpack()

    MediumCVSS 5.5No exploitEPSS 16%

    linux · linux kernelFeb 27, 2025

  • CVE-2025-21760
    43Plan

    ndisc: extend RCU protection in ndisc_send_skb()

    HighCVSS 8.1No exploitEPSS 37%

    linux · linux kernelFeb 27, 2025

  • CVE-2025-1738
    24Monitor

    Multiple vulnerabilities in Trivision Camera NC227WF

    MediumCVSS 6.2Proof of conceptEPSS 0%

    trivision · camera nc227wfFeb 27, 2025

  • CVE-2025-1739
    28Monitor

    Multiple vulnerabilities in Trivision Camera NC227WF

    HighCVSS 7.1Proof of conceptEPSS 0%

    trivision · camera nc227wfFeb 27, 2025

  • CVE-2025-1743
    27Monitor

    zyx0814 Pichome index.php path traversal

    MediumCVSS 6.9Proof of conceptEPSS 1%

    zyx0814 · pichomeFeb 27, 2025

  • CVE-2024-53944
    51Plan

    An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B devices through M762

    CriticalCVSS 9.8No exploitEPSS 39%

    Feb 27, 2025

  • CVE-2025-22952
    40Plan

    elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    usememos · memosFeb 27, 2025

  • CVE-2025-25570
    40Plan

    Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    Feb 27, 2025

  • CVE-2025-26264
    42Plan

    GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notifi

    HighCVSS 8.8Proof of conceptEPSS 23%

    Feb 27, 2025

  • CVE-2024-8425
    40Plan

    WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    wpswings · woocommerce ultimate gift cardFeb 28, 2025

  • CVE-2024-9193
    40Plan

    WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    whmpress · whmcsFeb 28, 2025

  • CVE-2025-26326
    36Monitor

    A vulnerability was identified in the NVDA Remote (version 2.6.4) and Tele NVDA Remote (version 2025.3.3) remote connection add-ons, which a

    HighCVSS 8.8Proof of conceptEPSS 1%

    Feb 28, 2025

  • CVE-2025-25461
    21Monitor

    A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    seeddms · seeddmsFeb 28, 2025

  • CVE-2025-26263
    20Monitor

    GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less (fixed in 6.2.0), is vulnerable to credentials disclosure d

    MediumCVSS 5.1Proof of conceptEPSS 1%

    Feb 28, 2025

  • CVE-2025-27410
    27Monitor

    PwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin

    MediumCVSS 6.5Proof of conceptEPSS 2%

    pwndoc project · pwndocFeb 28, 2025

  • CVE-2025-26466
    35Monitor

    Openssh: denial-of-service in openssh

    MediumCVSS 5.9Proof of conceptEPSS 38%

    openbsd · opensshFeb 28, 2025