漏洞列表 353262
CVE ID 标题 严重程度 CVSS 发布时间 受影响产品 数据源 操作
CVE-2025-12025
YouTube Subscribe <= 3.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Title and Channel ID
MEDIUM 4.4 2025-11-25
mahabubs YouTube Subscribe
CVE NVD
CVE-2025-13386
Social Images Widget <= 2.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion
MEDIUM 5.3 2025-11-25
lyrathemes Social Images Widget
CVE NVD
CVE-2025-12525
Locker Content <= 1.0.0 - Unauthenticated Information Exposure
MEDIUM 5.3 2025-11-25
appglut Locker Content
CVE NVD
CVE-2025-13389
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure
MEDIUM 5.3 2025-11-25
nmedia Admin and Customer Messages After Order for WooCommerce: OrderConvo
CVE NVD
CVE-2025-13376
ProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File Upload
HIGH 7.2 2025-11-25
ov3rkll ProjectList
CVE NVD
CVE-2025-12040
Wishlist for WooCommerce <= 1.0.9 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
MEDIUM 6.5 2025-11-25
themehunk Wishlist for WooCommerce
CVE NVD
CVE-2025-12586
Conditional Maintenance Mode for WordPress <= 1.0.0 - Cross-Site Request Forgery
MEDIUM 4.3 2025-11-25
evolurise Conditionnal Maintenance Mode for WordPress
CVE NVD
CVE-2025-13452
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages
MEDIUM 4.3 2025-11-25
nmedia Admin and Customer Messages After Order for WooCommerce: OrderConvo
CVE NVD
CVE-2025-12032
ZWeb - Social Mobile <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
MEDIUM 4.4 2025-11-25
vithanhlam Zweb Social Mobile – Ứng Dụng Nút Gọi Mobile
CVE NVD
CVE-2025-13383
Job Board by BestWebSoft <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array Storage
MEDIUM 6.1 2025-11-25
bestweblayout Job Board by BestWebSoft
CVE NVD
CVE-2025-13414
Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export
MEDIUM 5.3 2025-11-25
gwendydd Chamber Dashboard Business Directory
CVE NVD
CVE-2025-12043
Autochat Automatic Conversation <= 1.1.9 - Missing Authorization to Unauthenticated Settings Update
MEDIUM 5.3 2025-11-25
autochat Autochat Automatic Conversation
CVE NVD
CVE-2025-59365
A stack buffer overflow vulnerability has been identified in certain router models. An authenticated...
MEDIUM 6.9 2025-11-25
ASUS Router ASUS Router +1个
CVE NVD
CVE-2025-59366
An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an ...
CRITICAL 9.2 2025-11-25
ASUS Router ASUS Router +1个
CVE NVD
CVE-2025-64693
Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerabili...
CRITICAL 9.3 2025-11-25
Intercom, Inc. Security Point (Windows) of MaLion Intercom, Inc. Security Point (Windows) of MaLionCloud
CVE NVD
CVE-2025-62691
Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerabil...
CRITICAL 9.3 2025-11-25
Intercom, Inc. Security Point (Windows) of MaLion Intercom, Inc. Security Point (Windows) of MaLionCloud
CVE NVD
CVE-2025-59485
Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4....
MEDIUM 4.8 2025-11-25
Intercom, Inc. Security Point (Windows) of MaLion
CVE NVD
CVE-2025-12742
Remote Code Execution in Looker via Teradata JDBC Driver
HIGH 7.5 2025-11-25
Google Cloud Looker
CVE NVD
CVE-2025-13644
MongoDB may be susceptible to Invariant Failure due to batched delete
HIGH 7.1 2025-11-25
MongoDB Inc. MongoDB Server mongodb mongodb +1个
CVE NVD
CVE-2025-13643
MongoDB Server may allow queries to be terminated by unauthorized users
LOW 2.3 2025-11-25
MongoDB Inc. MongoDB Server mongodb mongodb +1个
CVE NVD