Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2025-05-28 CVE-2025-4963 The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.15 due to insufficient input sanitization and output escaping.
network
low complexity
CWE-79
6.4
6.4
2025-05-28 CVE-2025-5287 The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
7.5
7.5
2025-05-28 CVE-2025-5082 The WP Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘attachment_id’ parameter in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping.
network
low complexity
CWE-79
6.1
6.1
2025-05-28 CVE-2025-4800 The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to a missing file type validation in the stm_lms_add_assignment_attachment function in all versions up to, and including, 4.7.0.
network
low complexity
CWE-434
8.8
8.8
2025-05-28 CVE-2025-25025 IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
CWE-209
4.3
4.3
2025-05-28 CVE-2025-25026 IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.
network
low complexity
CWE-863
4.3
4.3
2025-05-28 CVE-2025-25029 IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.
network
low complexity
CWE-116
4.9
4.9
2025-05-27 CVE-2024-45094 IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting.
network
low complexity
CWE-79
5.5
5.5
2025-05-27 CVE-2025-5222 A stack buffer overflow was found in Internationl components for unicode (ICU ).
local
high complexity
CWE-120
7.0
7.0
2025-05-27 CVE-2025-5252 A vulnerability was found in PHPGurukul News Portal Project 4.1.
network
low complexity
CWE-74
7.3
7.3