By publication date

Exploited and new serious CVEs: April 2025

188 records · 16 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
45Plan	CVE-2025-32583Proof of concept	WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerabilitytermel · pdf 2 post · CWE-94 RCE	Critical9.9	—	20.3%	Apr 17, 2025
39Monitor	CVE-2025-32682Proof of concept	WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerabilityromancode · mapsvg · CWE-434 File upload	Critical9.9	—	0.5%	Apr 17, 2025
36Monitor	CVE-2025-39436Proof of concept	WordPress I Draw <= 1.0 - Arbitrary File Upload Vulnerabilityaidraw · i draw · CWE-434 File upload	Critical9.1	—	0.7%	Apr 17, 2025
39Monitor	CVE-2025-39588No exploit	WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerabilitybdthemes · ultimate store kit elementor addons · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Apr 17, 2025
39Monitor	CVE-2025-39596Proof of concept	WordPress Quentn WP plugin <= 1.2.8 - Privilege Escalation Vulnerabilityquentn.com gmbh · quentn wp · CWE-1390 Pre-auth Auth bypass	Critical9.8	—	0.6%	Apr 17, 2025
39Monitor	CVE-2024-53924Proof of concept	Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginnidgorissen · pycel · CWE-94 pre-auth RCE	Critical9.8	—	0.9%	Apr 17, 2025
33Monitor	CVE-2024-55211Proof of concept	An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.think · tk-rt-wr135g firmware · CWE-565 Auth bypass	High8.4	—	0.2%	Apr 17, 2025
39Monitor	CVE-2025-28009Proof of concept	A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.appventure · dietiqa · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.5%	Apr 17, 2025
25Monitor	CVE-2025-29722Proof of concept	A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users.yassmittal · commercify · CWE-352 Pre-auth CSRF	Medium6.3	—	0.1%	Apr 17, 2025
70This week	CVE-2025-42599Weaponized	Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability.qualitia · active\! mail · CWE-121 pre-auth RCE Memory safety	Critical9.8	KEV	3.3%	Apr 18, 2025
36Monitor	CVE-2025-2492Proof of concept	An improper authentication control vulnerability exists in AiCloud.asus · router · CWE-288 Pre-auth Auth bypass	Critical9.2	—	1.1%	Apr 18, 2025
38Monitor	CVE-2025-3785No exploit	D-Link DWR-M961 Authorization Interface formStaticDHCP stack-based overflowdlink · dwr-m961 firmware · CWE-119 Memory safety	High8.7	—	12.7%	Apr 18, 2025
31Monitor	CVE-2025-28228Proof of concept	A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 electrolink · fm\/dab\/tv transmitter web management system · CWE-522 Pre-auth Info leak	High7.5	—	1.8%	Apr 18, 2025
38Monitor	CVE-2025-32434Proof of concept	PyTorch: `torch.load` with `weights_only=True` leads to remote code executionlinuxfoundation · pytorch · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	2.3%	Apr 18, 2025
40Plan	CVE-2025-28242Proof of concept	Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.CWE-384 Pre-auth	Critical9.8	—	1.8%	Apr 18, 2025
37Monitor	CVE-2025-29513No exploit	Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Accessnodebb · nodebb · CWE-79 pre-auth RCE XSS	Medium6.1	—	42.8%	Apr 18, 2025
18Monitor	CVE-2025-28355Proof of concept	Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code anpersonal-management-system · personal management system · CWE-352 pre-auth RCE CSRF	Medium4.7	—	0.2%	Apr 18, 2025
39Monitor	CVE-2024-53591Proof of concept	An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.seclore · seclore · CWE-862 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.8	—	0.6%	Apr 18, 2025
31Monitor	CVE-2025-2010Proof of concept	JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin <= 2.3.9 - Unauthenticated SQL Injectionmhmrajib · jobwp – job board, job listing, career page and recruitment plugin · CWE-89 Pre-auth SQL injection	High7.5	—	1.9%	Apr 18, 2025
38Monitor	CVE-2025-3820No exploit	Tenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflowtenda · w12 firmware · CWE-119 Memory safety	High8.7	—	12.6%	Apr 19, 2025
30Monitor	CVE-2025-43919Proof of concept	GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at gnu · mailman · CWE-24 Pre-auth Path traversal	High7.5	—	1.4%	Apr 19, 2025
32Monitor	CVE-2025-43920Proof of concept	GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to executegnu · mailman · CWE-78 pre-auth RCE Command injection	High8.1	—	0.6%	Apr 19, 2025
21Monitor	CVE-2025-43921Proof of concept	GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.gnu · mailman · CWE-863 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.4%	Apr 19, 2025
31Monitor	CVE-2025-43929Proof of concept	open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked fkovidgoyal · kitty · CWE-346	High7.8	—	0.1%	Apr 19, 2025
36Monitor	CVE-2025-43963No exploit	In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values alibraw · libraw · CWE-125 Pre-auth Memory safety	Critical9.1	—	0.4%	Apr 20, 2025
24Monitor	CVE-2025-28121Proof of concept	code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing recode-projects · online exam mastering system · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.9%	Apr 21, 2025
27Monitor	CVE-2025-28367Proof of concept	mojoPortal <=2.9.0.1 is vulnerable to Directory Traversal via BetterImageGallery API Controller - ImageHandler Action.mojoportal · mojoportal · CWE-284 Pre-auth Path traversal Broken access control (IDOR)	Medium6.5	—	1.9%	Apr 21, 2025
35Monitor	CVE-2024-57394Proof of concept	The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to qianxin · tianqing endpoint security management system · CWE-73 Path traversal	High8.8	—	0.5%	Apr 21, 2025
39Monitor	CVE-2025-32958Proof of concept	Adept exposed the GITHUB_TOKEN in workflow run artifactadeptlanguage · adept · CWE-200 Pre-auth Info leak	Critical9.8	—	0.5%	Apr 21, 2025
21Monitor	CVE-2025-3855Proof of concept	CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injectionfairsketch · rise ultimate project manager · CWE-99	Medium5.3	—	0.4%	Apr 21, 2025
21Monitor	CVE-2025-3856No exploit	xxyopen Novel-Plus searchByPage sql injectionxxyopen · novel-plus · CWE-74 SQL injection	Medium5.3	—	0.5%	Apr 21, 2025
31Monitor	CVE-2025-1731Proof of concept	An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 zyxel · uos · CWE-732 Local privilege escalation	High7.8	—	0.9%	Apr 21, 2025
23Monitor	CVE-2025-3577No exploit	UNSUPPORTED WHEN ASSIGNED A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00zyxel · amg1302-t10b firmware · CWE-22 Path traversal	Medium4.9	—	12.6%	Apr 21, 2025
36Monitor	CVE-2025-3616Proof of concept	Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Uploadgreenshiftwp · greenshift - animation and page builder blocks · CWE-434 RCE File upload	High8.8	—	2.5%	Apr 22, 2025
28Monitor	CVE-2024-13569Proof of concept	Front End Users <= 3.2.32 - Reflected XSSetoilewebdesign · front end users · CWE-79 Pre-auth XSS	High7.1	—	0.5%	Apr 22, 2025
35Monitor	CVE-2025-2594Proof of concept	User Registration & Membership < 4.1.3 - Authentication Bypasswpeverest · user registration \& membership · CWE-639 Pre-auth Auth bypass Broken access control (IDOR)	High8.1	—	9.5%	Apr 22, 2025
40Plan	CVE-2025-3472Proof of concept	Ocean Extra <= 2.4.6 - Unauthenticated Arbitrary Shortcode Executionoceanwp · ocean extra · CWE-94 pre-auth RCE	Critical9.8	—	2.0%	Apr 22, 2025
29Monitor	CVE-2024-40445Proof of concept	A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary ctan · mimetex · CWE-77 pre-auth RCE Path traversal Command injection	High7.3	—	0.6%	Apr 22, 2025
30Monitor	CVE-2024-33452No exploit	An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD reopenresty · lua-nginx-module · CWE-444 Pre-auth	High7.7	—	0.8%	Apr 22, 2025
96Now	CVE-2025-34028Weaponized	Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversalcommvault · commvault · CWE-22 pre-auth RCE Path traversal	Critical9.3	KEV	97.5%	Apr 22, 2025
24Monitor	CVE-2025-26159Proof of concept	Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature.CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Apr 22, 2025
37Monitor	CVE-2025-32965Proof of concept	Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2xrplf · xrpl.js · CWE-506 Pre-auth	Critical9.3	—	0.9%	Apr 22, 2025
32Monitor	CVE-2025-2703No exploit	The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability.grafana · grafana · CWE-79 RCE XSS	Medium6.8	—	16.0%	Apr 23, 2025
33Monitor	CVE-2025-32966Proof of concept	Dataease H2 JDBC Connection Remote Code Executiondataease · dataease · CWE-290 pre-auth RCE Auth bypass	High8.2	—	4.4%	Apr 23, 2025
61This week	CVE-2025-32969Proof of concept	org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST APIxwiki · xwiki · CWE-89 pre-auth RCE SQL injection	Critical9.3	—	80.0%	Apr 23, 2025
36Monitor	CVE-2025-2760No exploit	GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 RCE Memory safety	High7.8	—	17.1%	Apr 23, 2025
30Monitor	CVE-2025-27580Proof of concept	NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, tinih · brics · CWE-335	High7.5	—	0.7%	Apr 23, 2025
17Monitor	CVE-2025-27581Proof of concept	NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET monih · brics · CWE-425	Medium4.3	—	0.3%	Apr 23, 2025
64This week	CVE-2025-1976Weaponized	Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6broadcom · fabric operating system · CWE-94 RCE	High8.6	KEV	0.6%	Apr 23, 2025
35Monitor	CVE-2025-2558Proof of concept	The Wound <= 0.0.1 - Unauthenticated LFIthe wound project · the wound · CWE-22 Pre-auth Path traversal	High8.6	—	2.4%	Apr 24, 2025
39Monitor	CVE-2025-3604Proof of concept	Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeoverflynax · flynax bridge · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.7%	Apr 24, 2025
33Monitor	CVE-2025-3776Proof of concept	Verification SMS with TargetSMS <= 1.5 - Unauthenticated Limited Remote Code Executioncajka · verification sms with targetsms · CWE-94 pre-auth RCE	High8.3	—	0.9%	Apr 24, 2025
99Now	CVE-2025-31324Weaponized	Missing Authorization check in SAP NetWeaver (Visual Composer development server)sap · netweaver · CWE-434 Pre-auth File upload	Critical9.8	KEV	99.4%	Apr 24, 2025
26Monitor	CVE-2025-29529Proof of concept	ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component ForgotpaCWE-89 Pre-auth SQL injection	Medium6.5	—	0.3%	Apr 24, 2025
38Monitor	CVE-2025-46271Proof of concept	Planet Technology Network Products OS Command Injectionplanet technology · uni-nms-lite · CWE-78 pre-auth RCE Command injection	Critical9.3	—	1.9%	Apr 24, 2025
36Monitor	CVE-2025-43864Proof of concept	React Router allows a DoS via cache poisoning by forcing SPA moderemix-run · react-router · CWE-755 Pre-auth Denial of service	High7.5	—	20.4%	Apr 24, 2025
32Monitor	CVE-2025-43865Proof of concept	React Router allows pre-render data spoofing on React-Router framework moderemix-run · react-router · CWE-345 Pre-auth	High8.2	—	0.8%	Apr 24, 2025
30Monitor	CVE-2025-32044Proof of concept	Moodle: unauthenticated rest api user data exposuremoodle · moodle · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Apr 25, 2025
100Now	CVE-2025-32432Weaponized	Craft CMS Allows Remote Code Executioncraftcms · craft cms · CWE-94 pre-auth RCE	Critical10.0	KEV	99.7%	Apr 25, 2025
43Plan	CVE-2025-46618No exploit	In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tabjetbrains · teamcity · CWE-79 Pre-auth XSS	Medium6.1	—	63.0%	Apr 25, 2025
59Plan	CVE-2025-3935Weaponized	ScreenConnect Exposure to ASP.NET ViewState Code Injectionconnectwise · screenconnect · CWE-502 RCE Deserialization	High7.2	KEV	3.5%	Apr 25, 2025
65This week	CVE-2025-3928Weaponized	Commvault Web Server unspecified vulnerabilitycommvault · commvault · CWE-94 RCE	High8.7	KEV	2.5%	Apr 25, 2025
39Monitor	CVE-2025-2907Proof of concept	Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Updatetychesoftwares · order delivery date pro for woocommerce · CWE-352 Pre-auth CSRF	Critical9.8	—	1.4%	Apr 26, 2025
40Plan	CVE-2025-3914Proof of concept	Aeropage Sync for Airtable <= 3.2.0 - Authenticated (Subscriber+) Arbitrary File Uploadaeropage · aeropage sync for airtable · CWE-434 RCE File upload	High8.8	—	17.3%	Apr 26, 2025
39Monitor	CVE-2025-46673Proof of concept	NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Dnasa · cryptolib · CWE-913	Critical9.9	—	0.5%	Apr 26, 2025
21Monitor	CVE-2025-3969Proof of concept	codeprojects News Publishing Site Dashboard Edit Category Page edit-category.php unrestricted uploadcode-projects · news publishing site dashboard · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.5%	Apr 27, 2025
25Monitor	CVE-2025-3983No exploit	AMTT Hotel Broadband Operation System nlog_down.php command injectionamttgroup · hibos · CWE-74 RCE Command injection	Medium5.1	—	17.9%	Apr 27, 2025
24Monitor	CVE-2025-3987No exploit	TOTOLINK N150RT formWsc command injectiontotolink · n150rt firmware · CWE-74 RCE Command injection	Medium5.3	—	11.2%	Apr 27, 2025
29Monitor	CVE-2025-22235Proof of concept	Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposedspring · spring boot · CWE-20 Pre-auth	High7.3	—	0.4%	Apr 28, 2025
27Monitor	CVE-2025-4028Proof of concept	PHPGurukul COVID19 Testing Management System profile.php sql injectionphpgurukul · covid19 testing management system · CWE-74 Pre-auth SQL injection	Medium6.9	—	0.5%	Apr 28, 2025
48Plan	CVE-2025-31650Proof of concept	Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frameapache · tomcat · CWE-459 Pre-auth Denial of service	High7.5	—	61.3%	Apr 28, 2025
40Plan	CVE-2025-31651Proof of concept	Apache Tomcat: Bypass of rules in Rewrite Valveapache · tomcat · CWE-116 Pre-auth	Critical9.8	—	4.2%	Apr 28, 2025
35Monitor	CVE-2025-24252Proof of concept	A use-after-free issue was addressed with improved memory management.apple · ipados · CWE-416 Pre-auth Memory safety	High8.8	—	1.3%	Apr 28, 2025
21Monitor	CVE-2025-24271Proof of concept	An access issue was addressed with improved access restrictions.apple · ipados · CWE-306 Pre-auth Auth bypass	Medium5.4	—	0.5%	Apr 28, 2025
24Monitor	CVE-2025-46349Proof of concept	YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Apr 29, 2025
27Monitor	CVE-2025-4076No exploit	LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injectionlb-link · bl-ac3600 · CWE-74 RCE Command injection	Medium5.3	—	19.7%	Apr 29, 2025
30Monitor	CVE-2024-57698Proof of concept	An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, modernwms · modernwms · CWE-281 Pre-auth Auth bypass	High7.5	—	0.4%	Apr 29, 2025
21Monitor	CVE-2025-4078Proof of concept	Wangshen SecGate 3600 g=log_export_file path traversalwangshen · secgate 3600 · CWE-22 Path traversal	Medium5.3	—	1.0%	Apr 29, 2025
32Monitor	CVE-2025-3501No exploit	Org.keycloak.protocol.services: keycloak hostname verificationred hat · red hat build of keycloak · CWE-297 Pre-auth Weak crypto	High8.2	—	0.4%	Apr 29, 2025
24Monitor	CVE-2025-46549Proof of concept	Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Apr 29, 2025
24Monitor	CVE-2025-46550Proof of concept	Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Apr 29, 2025
38Monitor	CVE-2025-0520Proof of concept	ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Executionshowdoc · showdoc · CWE-434 RCE File upload	Critical9.4	—	2.4%	Apr 29, 2025
36Monitor	CVE-2025-27134Proof of concept	Privilege escalation in Joplin server via user patch endpointjoplin project · joplin · CWE-284 Broken access control (IDOR)	High8.8	—	2.2%	Apr 30, 2025
24Monitor	CVE-2025-32970Proof of concept	org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerabilityxwiki · xwiki · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.5%	Apr 30, 2025
22Monitor	CVE-2025-24091Proof of concept	An app could impersonate system notifications.apple · ipados · CWE-290 Auth bypass Denial of service	Medium5.5	—	0.2%	Apr 30, 2025
21Monitor	CVE-2025-46554Proof of concept	XWiki missing authorization when accessing the wiki level attachments list and metadata via REST APIxwiki · xwiki · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	1.0%	Apr 30, 2025
30Monitor	CVE-2025-2082Proof of concept	Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerabilitytesla · model 3 firmware · CWE-190 pre-auth RCE Memory safety	High7.5	—	0.3%	Apr 30, 2025
27Monitor	CVE-2025-24132Proof of concept	The issue was addressed with improved memory handling.apple · airplay audio software development kit · CWE-119 Pre-auth Memory safety Denial of service	Medium6.5	—	3.1%	Apr 30, 2025

CVE-2025-32583
45Plan
WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability
CriticalCVSS 9.9Proof of conceptEPSS 20%
- RCE
termel · pdf 2 postApr 17, 2025
CVE-2025-32682
39Monitor
WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability
CriticalCVSS 9.9Proof of conceptEPSS 0%
- File upload
romancode · mapsvgApr 17, 2025
CVE-2025-39436
36Monitor
WordPress I Draw <= 1.0 - Arbitrary File Upload Vulnerability
CriticalCVSS 9.1Proof of conceptEPSS 0%
- File upload
aidraw · i drawApr 17, 2025
CVE-2025-39588
39Monitor
WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
bdthemes · ultimate store kit elementor addonsApr 17, 2025
CVE-2025-39596
39Monitor
WordPress Quentn WP plugin <= 1.2.8 - Privilege Escalation Vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
quentn.com gmbh · quentn wpApr 17, 2025
CVE-2024-53924
39Monitor
Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginni
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
dgorissen · pycelApr 17, 2025
CVE-2024-55211
33Monitor
An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.
HighCVSS 8.4Proof of conceptEPSS 0%
- Auth bypass
think · tk-rt-wr135g firmwareApr 17, 2025
CVE-2025-28009
39Monitor
A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
appventure · dietiqaApr 17, 2025
CVE-2025-29722
25Monitor
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users.
MediumCVSS 6.3Proof of conceptEPSS 0%
- Pre-auth
- CSRF
yassmittal · commercifyApr 17, 2025
CVE-2025-42599
70This week
Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability.
CriticalCVSS 9.8KEVWeaponizedEPSS 3%
- pre-auth RCE
- Memory safety
qualitia · active\! mailApr 18, 2025
CVE-2025-2492
36Monitor
An improper authentication control vulnerability exists in AiCloud.
CriticalCVSS 9.2Proof of conceptEPSS 1%
- Pre-auth
- Auth bypass
asus · routerApr 18, 2025
CVE-2025-3785
38Monitor
D-Link DWR-M961 Authorization Interface formStaticDHCP stack-based overflow
HighCVSS 8.7No exploitEPSS 12%
- Memory safety
dlink · dwr-m961 firmwareApr 18, 2025
CVE-2025-28228
31Monitor
A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2
HighCVSS 7.5Proof of conceptEPSS 1%
- Pre-auth
- Info leak
electrolink · fm\/dab\/tv transmitter web management systemApr 18, 2025
CVE-2025-32434
38Monitor
PyTorch: `torch.load` with `weights_only=True` leads to remote code execution
CriticalCVSS 9.3Proof of conceptEPSS 2%
- pre-auth RCE
- Deserialization
linuxfoundation · pytorchApr 18, 2025
CVE-2025-28242
40Plan
Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
Apr 18, 2025
CVE-2025-29513
37Monitor
Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access
MediumCVSS 6.1No exploitEPSS 42%
- pre-auth RCE
- XSS
nodebb · nodebbApr 18, 2025
CVE-2025-28355
18Monitor
Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code an
MediumCVSS 4.7Proof of conceptEPSS 0%
- pre-auth RCE
- CSRF
personal-management-system · personal management systemApr 18, 2025
CVE-2024-53591
39Monitor
An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
seclore · secloreApr 18, 2025
CVE-2025-2010
31Monitor
JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin <= 2.3.9 - Unauthenticated SQL Injection
HighCVSS 7.5Proof of conceptEPSS 1%
- Pre-auth
- SQL injection
mhmrajib · jobwp – job board, job listing, career page and recruitment pluginApr 18, 2025
CVE-2025-3820
38Monitor
Tenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflow
HighCVSS 8.7No exploitEPSS 12%
- Memory safety
tenda · w12 firmwareApr 19, 2025
CVE-2025-43919
30Monitor
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at
HighCVSS 7.5Proof of conceptEPSS 1%
- Pre-auth
- Path traversal
gnu · mailmanApr 19, 2025
CVE-2025-43920
32Monitor
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute
HighCVSS 8.1Proof of conceptEPSS 0%
- pre-auth RCE
- Command injection
gnu · mailmanApr 19, 2025
CVE-2025-43921
21Monitor
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
gnu · mailmanApr 19, 2025
CVE-2025-43929
31Monitor
open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked f
HighCVSS 7.8Proof of conceptEPSS 0%
kovidgoyal · kittyApr 19, 2025
CVE-2025-43963
36Monitor
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values a
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Memory safety
libraw · librawApr 20, 2025
CVE-2025-28121
24Monitor
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing re
MediumCVSS 6.1Proof of conceptEPSS 0%
- pre-auth RCE
- XSS
code-projects · online exam mastering systemApr 21, 2025
CVE-2025-28367
27Monitor
mojoPortal <=2.9.0.1 is vulnerable to Directory Traversal via BetterImageGallery API Controller - ImageHandler Action.
MediumCVSS 6.5Proof of conceptEPSS 1%
- Pre-auth
- Path traversal
- Broken access control (IDOR)
mojoportal · mojoportalApr 21, 2025
CVE-2024-57394
35Monitor
The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to
HighCVSS 8.8Proof of conceptEPSS 0%
- Path traversal
qianxin · tianqing endpoint security management systemApr 21, 2025
CVE-2025-32958
39Monitor
Adept exposed the GITHUB_TOKEN in workflow run artifact
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Info leak
adeptlanguage · adeptApr 21, 2025
CVE-2025-3855
21Monitor
CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection
MediumCVSS 5.3Proof of conceptEPSS 0%
fairsketch · rise ultimate project managerApr 21, 2025
CVE-2025-3856
21Monitor
xxyopen Novel-Plus searchByPage sql injection
MediumCVSS 5.3No exploitEPSS 0%
- SQL injection
xxyopen · novel-plusApr 21, 2025
CVE-2025-1731
31Monitor
An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20
HighCVSS 7.8Proof of conceptEPSS 0%
- Local privilege escalation
zyxel · uosApr 21, 2025
CVE-2025-3577
23Monitor
**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00
MediumCVSS 4.9No exploitEPSS 12%
- Path traversal
zyxel · amg1302-t10b firmwareApr 21, 2025
CVE-2025-3616
36Monitor
Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload
HighCVSS 8.8Proof of conceptEPSS 2%
- RCE
- File upload
greenshiftwp · greenshift - animation and page builder blocksApr 22, 2025
CVE-2024-13569
28Monitor
Front End Users <= 3.2.32 - Reflected XSS
HighCVSS 7.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
etoilewebdesign · front end usersApr 22, 2025
CVE-2025-2594
35Monitor
User Registration & Membership < 4.1.3 - Authentication Bypass
HighCVSS 8.1Proof of conceptEPSS 9%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
wpeverest · user registration \& membershipApr 22, 2025
CVE-2025-3472
40Plan
Ocean Extra <= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution
CriticalCVSS 9.8Proof of conceptEPSS 2%
- pre-auth RCE
oceanwp · ocean extraApr 22, 2025
CVE-2024-40445
29Monitor
A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary
HighCVSS 7.3Proof of conceptEPSS 0%
- pre-auth RCE
- Path traversal
- Command injection
ctan · mimetexApr 22, 2025
CVE-2024-33452
30Monitor
An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD re
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
openresty · lua-nginx-moduleApr 22, 2025
CVE-2025-34028
96Now
Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
CriticalCVSS 9.3KEVWeaponizedEPSS 97%
- pre-auth RCE
- Path traversal
commvault · commvaultApr 22, 2025
CVE-2025-26159
24Monitor
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature.
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
Apr 22, 2025
CVE-2025-32965
37Monitor
Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
xrplf · xrpl.jsApr 22, 2025
CVE-2025-2703
32Monitor
The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability.
MediumCVSS 6.8No exploitEPSS 16%
- RCE
- XSS
grafana · grafanaApr 23, 2025
CVE-2025-32966
33Monitor
Dataease H2 JDBC Connection Remote Code Execution
HighCVSS 8.2Proof of conceptEPSS 4%
- pre-auth RCE
- Auth bypass
dataease · dataeaseApr 23, 2025
CVE-2025-32969
61This week
org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API
CriticalCVSS 9.3Proof of conceptEPSS 80%
- pre-auth RCE
- SQL injection
xwiki · xwikiApr 23, 2025
CVE-2025-2760
36Monitor
GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 17%
- RCE
- Memory safety
gimp · gimpApr 23, 2025
CVE-2025-27580
30Monitor
NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, ti
HighCVSS 7.5Proof of conceptEPSS 0%
nih · bricsApr 23, 2025
CVE-2025-27581
17Monitor
NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET mo
MediumCVSS 4.3Proof of conceptEPSS 0%
nih · bricsApr 23, 2025
CVE-2025-1976
64This week
Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
HighCVSS 8.6KEVWeaponizedEPSS 0%
- RCE
broadcom · fabric operating systemApr 23, 2025
CVE-2025-2558
35Monitor
The Wound <= 0.0.1 - Unauthenticated LFI
HighCVSS 8.6Proof of conceptEPSS 2%
- Pre-auth
- Path traversal
the wound project · the woundApr 24, 2025
CVE-2025-3604
39Monitor
Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
flynax · flynax bridgeApr 24, 2025
CVE-2025-3776
33Monitor
Verification SMS with TargetSMS <= 1.5 - Unauthenticated Limited Remote Code Execution
HighCVSS 8.3Proof of conceptEPSS 0%
- pre-auth RCE
cajka · verification sms with targetsmsApr 24, 2025
CVE-2025-31324
99Now
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- Pre-auth
- File upload
sap · netweaverApr 24, 2025
CVE-2025-29529
26Monitor
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpa
MediumCVSS 6.5Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
Apr 24, 2025
CVE-2025-46271
38Monitor
Planet Technology Network Products OS Command Injection
CriticalCVSS 9.3Proof of conceptEPSS 1%
- pre-auth RCE
- Command injection
planet technology · uni-nms-liteApr 24, 2025
CVE-2025-43864
36Monitor
React Router allows a DoS via cache poisoning by forcing SPA mode
HighCVSS 7.5Proof of conceptEPSS 20%
- Pre-auth
- Denial of service
remix-run · react-routerApr 24, 2025
CVE-2025-43865
32Monitor
React Router allows pre-render data spoofing on React-Router framework mode
HighCVSS 8.2Proof of conceptEPSS 0%
- Pre-auth
remix-run · react-routerApr 24, 2025
CVE-2025-32044
30Monitor
Moodle: unauthenticated rest api user data exposure
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Info leak
moodle · moodleApr 25, 2025
CVE-2025-32432
100Now
Craft CMS Allows Remote Code Execution
CriticalCVSS 10.0KEVWeaponizedEPSS 99%
- pre-auth RCE
craftcms · craft cmsApr 25, 2025
CVE-2025-46618
43Plan
In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab
MediumCVSS 6.1No exploitEPSS 63%
- Pre-auth
- XSS
jetbrains · teamcityApr 25, 2025
CVE-2025-3935
59Plan
ScreenConnect Exposure to ASP.NET ViewState Code Injection
HighCVSS 7.2KEVWeaponizedEPSS 3%
- RCE
- Deserialization
connectwise · screenconnectApr 25, 2025
CVE-2025-3928
65This week
Commvault Web Server unspecified vulnerability
HighCVSS 8.7KEVWeaponizedEPSS 2%
- RCE
commvault · commvaultApr 25, 2025
CVE-2025-2907
39Monitor
Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
- CSRF
tychesoftwares · order delivery date pro for woocommerceApr 26, 2025
CVE-2025-3914
40Plan
Aeropage Sync for Airtable <= 3.2.0 - Authenticated (Subscriber+) Arbitrary File Upload
HighCVSS 8.8Proof of conceptEPSS 17%
- RCE
- File upload
aeropage · aeropage sync for airtableApr 26, 2025
CVE-2025-46673
39Monitor
NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space D
CriticalCVSS 9.9Proof of conceptEPSS 0%
nasa · cryptolibApr 26, 2025
CVE-2025-3969
21Monitor
codeprojects News Publishing Site Dashboard Edit Category Page edit-category.php unrestricted upload
MediumCVSS 5.3Proof of conceptEPSS 0%
- File upload
- Broken access control (IDOR)
code-projects · news publishing site dashboardApr 27, 2025
CVE-2025-3983
25Monitor
AMTT Hotel Broadband Operation System nlog_down.php command injection
MediumCVSS 5.1No exploitEPSS 17%
- RCE
- Command injection
amttgroup · hibosApr 27, 2025
CVE-2025-3987
24Monitor
TOTOLINK N150RT formWsc command injection
MediumCVSS 5.3No exploitEPSS 11%
- RCE
- Command injection
totolink · n150rt firmwareApr 27, 2025
CVE-2025-22235
29Monitor
Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed
HighCVSS 7.3Proof of conceptEPSS 0%
- Pre-auth
spring · spring bootApr 28, 2025
CVE-2025-4028
27Monitor
PHPGurukul COVID19 Testing Management System profile.php sql injection
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
phpgurukul · covid19 testing management systemApr 28, 2025
CVE-2025-31650
48Plan
Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
HighCVSS 7.5Proof of conceptEPSS 61%
- Pre-auth
- Denial of service
apache · tomcatApr 28, 2025
CVE-2025-31651
40Plan
Apache Tomcat: Bypass of rules in Rewrite Valve
CriticalCVSS 9.8Proof of conceptEPSS 4%
- Pre-auth
apache · tomcatApr 28, 2025
CVE-2025-24252
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8Proof of conceptEPSS 1%
- Pre-auth
- Memory safety
apple · ipadosApr 28, 2025
CVE-2025-24271
21Monitor
An access issue was addressed with improved access restrictions.
MediumCVSS 5.4Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
apple · ipadosApr 28, 2025
CVE-2025-46349
24Monitor
YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiApr 29, 2025
CVE-2025-4076
27Monitor
LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection
MediumCVSS 5.3No exploitEPSS 19%
- RCE
- Command injection
lb-link · bl-ac3600Apr 29, 2025
CVE-2024-57698
30Monitor
An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication,
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
modernwms · modernwmsApr 29, 2025
CVE-2025-4078
21Monitor
Wangshen SecGate 3600 g=log_export_file path traversal
MediumCVSS 5.3Proof of conceptEPSS 1%
- Path traversal
wangshen · secgate 3600Apr 29, 2025
CVE-2025-3501
32Monitor
Org.keycloak.protocol.services: keycloak hostname verification
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
red hat · red hat build of keycloakApr 29, 2025
CVE-2025-46549
24Monitor
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiApr 29, 2025
CVE-2025-46550
24Monitor
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
yeswiki · yeswikiApr 29, 2025
CVE-2025-0520
38Monitor
ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
CriticalCVSS 9.4Proof of conceptEPSS 2%
- RCE
- File upload
showdoc · showdocApr 29, 2025
CVE-2025-27134
36Monitor
Privilege escalation in Joplin server via user patch endpoint
HighCVSS 8.8Proof of conceptEPSS 2%
- Broken access control (IDOR)
joplin project · joplinApr 30, 2025
CVE-2025-32970
24Monitor
org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- Open redirect
xwiki · xwikiApr 30, 2025
CVE-2025-24091
22Monitor
An app could impersonate system notifications.
MediumCVSS 5.5Proof of conceptEPSS 0%
- Auth bypass
- Denial of service
apple · ipadosApr 30, 2025
CVE-2025-46554
21Monitor
XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API
MediumCVSS 5.3Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
xwiki · xwikiApr 30, 2025
CVE-2025-2082
30Monitor
Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.5Proof of conceptEPSS 0%
- pre-auth RCE
- Memory safety
tesla · model 3 firmwareApr 30, 2025
CVE-2025-24132
27Monitor
The issue was addressed with improved memory handling.
MediumCVSS 6.5Proof of conceptEPSS 3%
- Pre-auth
- Memory safety
- Denial of service
apple · airplay audio software development kitApr 30, 2025