Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2025-05-28 CVE-2025-5082 The WP Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘attachment_id’ parameter in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping.
network
low complexity
CWE-79
6.1
6.1
2025-05-28 CVE-2025-25025 IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
CWE-209
4.3
4.3
2025-05-28 CVE-2025-25026 IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.
network
low complexity
CWE-863
4.3
4.3
2025-05-28 CVE-2025-25029 IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.
network
low complexity
CWE-116
4.9
4.9
2025-05-27 CVE-2024-45094 IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting.
network
low complexity
CWE-79
5.5
5.5
2025-05-27 CVE-2025-5245 A vulnerability classified as critical has been found in GNU Binutils up to 2.44.
local
low complexity
CWE-119
5.3
5.3
2025-05-27 CVE-2025-5244 A vulnerability was found in GNU Binutils up to 2.44.
local
low complexity
CWE-119
5.3
5.3
2025-05-27 CVE-2025-5232 A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1.0.
network
low complexity
CWE-74
4.7
4.7
2025-05-27 CVE-2025-4682 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML attributes in Slider and Post Carousel widgets in all versions up to, and including, 5.4.0 due to insufficient input sanitization and output escaping.
network
low complexity
CWE-79
6.4
6.4
2025-05-27 CVE-2025-4683 The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_blog function in all versions up to, and including, 4.17.5.
network
low complexity
CWE-862
4.3
4.3