CVE-2025-39473 |
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core allows PHP Local File Inclusion. This issue affects Seofy Core: from n/a through 1.4.5.
CVSS: HIGH (8.1) EPSS Score: 0.06%
June 9th, 2025 (about 1 month ago)
|
CVE-2025-32595 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Krowd allows PHP Local File Inclusion. This issue affects Krowd: from n/a through 1.4.1.
CVSS: HIGH (8.1) EPSS Score: 0.15%
June 9th, 2025 (about 1 month ago)
|
CVE-2025-32308 |
Description: Missing Authorization vulnerability in looks_awesome Team Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Team Builder: from n/a through 1.5.7.
CVSS: HIGH (7.6) EPSS Score: 0.04%
June 9th, 2025 (about 1 month ago)
|
CVE-2025-32305 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sneeit FlatNews allows Reflected XSS. This issue affects FlatNews: from n/a through 5.8.
CVSS: HIGH (7.1) EPSS Score: 0.04%
June 9th, 2025 (about 1 month ago)
|
CVE-2025-32291 |
Description: Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro allows Using Malicious Files. This issue affects SUMO Affiliates Pro: from n/a through 10.7.0.
CVSS: CRITICAL (10.0) EPSS Score: 0.06% SSVC Exploitation: none
June 9th, 2025 (about 1 month ago)
|
CVE-2025-31925 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT allows Reflected XSS. This issue affects SHOUT: from n/a through 3.5.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
June 9th, 2025 (about 1 month ago)
|
CVE-2025-31920 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Guppy allows SQL Injection. This issue affects WP Guppy: from n/a through 4.3.3.
CVSS: HIGH (8.5) EPSS Score: 0.03%
June 9th, 2025 (about 1 month ago)
|
CVE-2025-31917 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player allows Reflected XSS. This issue affects Universal Video Player: from n/a through 3.8.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
June 9th, 2025 (about 1 month ago)
|
CVE-2025-31638 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeton Spare allows Reflected XSS. This issue affects Spare: from n/a through 1.7.
CVSS: HIGH (7.1) EPSS Score: 0.04%
June 9th, 2025 (about 1 month ago)
|
CVE-2025-31635 |
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER allows Path Traversal. This issue affects CLEVER: from n/a through 2.6.
CVSS: HIGH (7.5) EPSS Score: 0.06%
June 9th, 2025 (about 1 month ago)
|