deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-11530
Published: 2025-10-09
Description: A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/xmqaq/cve/issues/1; https://vuldb.com/?ctiid.327668
CVE: CVE-2025-27039
Published: 2025-10-09
Description: Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-390
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27040
Published: 2025-10-09
Description: Information disclosure may occur while processing the hypervisor log.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27041
Published: 2025-10-09
Description: Transient DOS while processing video packets received from video firmware.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27045
Published: 2025-10-09
Description: Information disclosure while processing batch command execution in Video driver.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27048
Published: 2025-10-09
Description: Memory corruption while processing camera platform driver IOCTL calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27049
Published: 2025-10-09
Description: Transient DOS while processing IOCTL call for image encoding.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27053
Published: 2025-10-09
Description: Memory corruption during PlayReady APP usecase while processing TA commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-131
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27054
Published: 2025-10-09
Description: Memory corruption while processing a malformed license file during reboot.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27059
Published: 2025-10-09
Description: Memory corruption while performing SCM call.
CVSS Score: 8.8 (HIGH)
CWE: CWE-823
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-27060
Published: 2025-10-09
Description: Memory corruption while performing SCM call with malformed inputs.
CVSS Score: 8.8 (HIGH)
CWE: CWE-822
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47338
Published: 2025-10-09
Description: Memory corruption while processing escape commands from userspace.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47340
Published: 2025-10-09
Description: Memory corruption while processing IOCTL call to get the mapping.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47341
Published: 2025-10-09
Description: memory corruption while processing an image encoding completion event.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47342
Published: 2025-10-09
Description: Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
CVSS Score: 7.1 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47347
Published: 2025-10-09
Description: Memory corruption while processing control commands in the virtual memory management interface.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47349
Published: 2025-10-09
Description: Memory corruption while processing an escape call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-823
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47351
Published: 2025-10-09
Description: Memory corruption while processing user buffers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47354
Published: 2025-10-09
Description: Memory corruption while allocating buffers in DSP service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-47355
Published: 2025-10-09
Description: Memory corruption while invoking remote procedure IOCTL calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE: CVE-2025-6038
Published: 2025-10-09
Description: The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation via password update in all versions up to, and including, 1.4.0. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords, including those of administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://themeforest.net/item/lisfinity-classified-ads-wordpress-theme/26342611; https://www.wordfence.com/threat-intel/vulnerabilities/id/a3cd1c3e-5bb0-4653-8764-2ca38d9a7c77?source=cve
CVE: CVE-2025-7526
Published: 2025-10-09
Description: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file deletion (via renaming) due to insufficient file path validation in the set_user_profile_image function in all versions up to, and including, 6.6.7. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/wp-travel-engine/tags/6.5.6/includes/dashboard/class-wp-travel-engine-form-handler.php#L512; https://www.wordfence.com/threat-intel/vulnerabilities/id/c754d957-26a8-4fef-a487-96d566c2dc36?source=cve
CVE: CVE-2025-7634
Published: 2025-10-09
Description: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.6.7 via the mode parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-98
References: https://plugins.trac.wordpress.org/browser/wp-travel-engine/tags/6.6.0/includes/classes/Core/Controllers/Ajax/FilterTripsHtml.php#L72; https://plugins.trac.wordpress.org/browser/wp-travel-engine/tags/6.6.0/includes/classes/Core/Controllers/Ajax/LoadTripsHtml.php#L27; https://www.wordfence.com/threat-intel/vulnerabilities/id/ce119965-01a0-4cff-a0b2-e99bceb1406c?source=cve
CVE: CVE-2025-11522
Published: 2025-10-09
Description: The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeover in all versions up to, and including, 2.7. This is due to insufficient user validation in the search_and_go_elated_check_facebook_user() function This makes it possible for unauthenticated attackers to gain access to other user's accounts, including administrators, when Facebook login is enabled. CVE-2025-62064 is likely a duplicate of this CVE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://themeforest.net/item/search-go-modern-smart-directory-theme/15365040; https://www.wordfence.com/threat-intel/vulnerabilities/id/da590a65-8728-4577-b6e4-ecebc2a2277d?source=cve
CVE: CVE-2025-11539
Published: 2025-10-09
Description: Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then loaded by the Chromium process.

Instances are vulnerable if:

1. The default token ("authToken") is not changed, or is known to the attacker.
2. The attacker can reach the image renderer endpoint.
This issue affects grafana-image-renderer: from 1.0.0 through 4.0.16.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://github.com/grafana/grafana-image-renderer/releases/tag/v4.0.17; https://grafana.com/security/security-advisories/cve-2025-11539/
CVE: CVE-2025-10862
Published: 2025-10-09
Description: The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.1.3. This is due to insufficient escaping on the 'id' parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/popup-builder-block/tags/2.1.2/includes/Helpers/DataBase.php#L374; https://plugins.trac.wordpress.org/browser/popup-builder-block/tags/2.1.2/includes/Routes/Popup.php#L232; https://plugins.trac.wordpress.org/changeset/3369146/
CVE: CVE-2025-39954
Published: 2025-10-09
Description: In the Linux kernel, the following vulnerability has been resolved:

clk: sunxi-ng: mp: Fix dual-divider clock rate readback

When dual-divider clock support was introduced, the P divider offset was
left out of the .recalc_rate readback function. This causes the clock
rate to become bogus or even zero (possibly due to the P divider being
1, leading to a divide-by-zero).

Fix this by incorporating the P divider offset into the calculation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://git.kernel.org/stable/c/25fbbaf515acd13399589bd5ee6de5f35740cef2; https://git.kernel.org/stable/c/40108f69c372af3aea73e7829d6849a44638d662
CVE: CVE-2025-39955
Published: 2025-10-09
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

syzbot reported the splat below where a socket had tcp_sk(sk)->fastopen_rsk
in the TCP_ESTABLISHED state. [0]

syzbot reused the server-side TCP Fast Open socket as a new client before
the TFO socket completes 3WHS:

  1. accept()
  2. connect(AF_UNSPEC)
  3. connect() to another destination

As of accept(), sk->sk_state is TCP_SYN_RECV, and tcp_disconnect() changes
it to TCP_CLOSE and makes connect() possible, which restarts timers.

Since tcp_disconnect() forgot to clear tcp_sk(sk)->fastopen_rsk, the
retransmit timer triggered the warning and the intended packet was not
retransmitted.

Let's call reqsk_fastopen_remove() in tcp_disconnect().

[0]:
WARNING: CPU: 2 PID: 0 at net/ipv4/tcp_timer.c:542 tcp_retransmit_timer (net/ipv4/tcp_timer.c:542 (discriminator 7))
Modules linked in:
CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted 6.17.0-rc5-g201825fb4278 #62 PREEMPT(voluntary)
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:tcp_retransmit_timer (net/ipv4/tcp_timer.c:542 (discriminator 7))
Code: 41 55 41 54 55 53 48 8b af b8 08 00 00 48 89 fb 48 85 ed 0f 84 55 01 00 00 0f b6 47 12 3c 03 74 0c 0f b6 47 12 3c 04 74 04 90 <0f> 0b 90 48 8b 85 c0 00 00 00 48 89 ef 48 8b 40 30 e8 6a 4f 06 3e
RSP: 0018:ffffc900002f8d40 EFLAGS: 00010293
RAX: [PII_REDACTED] RBX: ffff[PII_REDACTED]00 RCX: [PII_REDACTED]
RDX: [PII_REDACTED] RSI: ffffffff83764080 RDI: ffff[PII_REDACTED]00
RBP: ffff888106d5c000 R08: [PII_REDACTED] R09: ffffc900002f8de8
R10:[PII_REDACTED]0000c2 R11: ffffc900002f8ff8 R12: ffff[PII_REDACTED]40
R13: ffff[PII_REDACTED]80 R14: ffff[PII_REDACTED]40 R15: ffffc900002f8de0
FS:  [PII_REDACTED](0000) GS:ffff88907b768000(0000) knlGS:[PII_REDACTED]
CS:  0010 DS: 0000 ES: 0000 CR0: [PII_REDACTED]
CR2: 00007f8044d69d90 CR3:[PII_REDACTED]c30003 CR4:[PII_REDACTED]370ef0
Call Trace:
 <IRQ>
 tcp_write_timer (net/ipv4/tcp_timer.c:738)
 call_timer_fn (kernel/time/timer.c:1747)
 __run_timers (kernel/time/timer.c:1799 kernel/time/timer.c:2372)
 timer_expire_remote (kernel/time/timer.c:2385 kernel/time/timer.c:2376 kernel/time/timer.c:2135)
 tmigr_handle_remote_up (kernel/time/timer_migration.c:944 kernel/time/timer_migration.c:1035)
 __walk_groups.isra.0 (kernel/time/timer_migration.c:533 (discriminator 1))
 tmigr_handle_remote (kernel/time/timer_migration.c:1096)
 handle_softirqs (./arch/x86/include/asm/jump_label.h:36 ./include/trace/events/irq.h:142 kernel/softirq.c:580)
 irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680 kernel/softirq.c:696)
 sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 (discriminator 35) arch/x86/kernel/apic/apic.c:1050 (discriminator 35))
 </IRQ>
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/17d[PII_REDACTED]14198d744d6afe54735c6b54c99; https://git.kernel.org/stable/c/33a4fdf0b4a25f8ce65380c3b0136b407ca57609; https://git.kernel.org/stable/c/45c8a6cc2bcd780e634a6ba8e46bffbdf1fc5c01
CVE: CVE-2025-39956
Published: 2025-10-09
Description: In the Linux kernel, the following vulnerability has been resolved:

igc: don't fail igc_probe() on LED setup error

When igc_led_setup() fails, igc_probe() fails and triggers kernel panic
in free_netdev() since unregister_netdev() is not called. [1]
This behavior can be tested using fault-injection framework, especially
the failslab feature. [2]

Since LED support is not mandatory, treat LED setup failures as
non-fatal and continue probe with a warning message, consequently
avoiding the kernel panic.

[1]
 kernel BUG at net/core/dev.c:12047!
 Oops: invalid opcode: 0000 [#1] SMP NOPTI
 CPU: 0 UID: 0 PID: 937 Comm: repro-igc-led-e Not tainted 6.17.0-rc4-enjuk-tnguy-00865-gc4940196ab02 #64 PREEMPT(voluntary)
 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
 RIP: 0010:free_netdev+0x278/0x2b0
 [...]
 Call Trace:
  <TASK>
  igc_probe+0x370/0x910
  local_pci_probe+0x3a/0x80
  pci_device_probe+0xd1/0x200
 [...]

[2]
 #!/bin/bash -ex

 FAILSLAB_PATH=/sys/kernel/debug/failslab/
 DEVICE=0000:00:05.0
 START_ADDR=$(grep " igc_led_setup" /proc/kallsyms \
         | awk '{printf("0x%s", $1)}')
 END_ADDR=$(printf "0x%x" $((START_ADDR + 0x100)))

 echo $START_ADDR > $FAILSLAB_PATH/require-start
 echo $END_ADDR > $FAILSLAB_PATH/require-end
 echo 1 > $FAILSLAB_PATH/times
 echo 100 > $FAILSLAB_PATH/probability
 echo N > $FAILSLAB_PATH/ignore-gfp-wait

 echo $DEVICE > /sys/bus/pci/drivers/igc/bind
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/528eb4e19ec0df30d0c9ae4074ce945667dde919; https://git.kernel.org/stable/c/bec504867acc7315de9cd96ef9161fa52a25abe8; https://git.kernel.org/stable/c/f05e82d8553232cef150a6dbb70ed67d162abb2b
CVE: CVE-2025-39957
Published: 2025-10-09
Description: In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: increase scan_ies_len for S1G

Currently the S1G capability element is not taken into account
for the scan_ies_len, which leads to a buffer length validation
failure in ieee80211_prep_hw_scan() and subsequent WARN in
__ieee80211_start_scan(). This prevents hw scanning from functioning.
To fix ensure we accommodate for the S1G capability length.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/0dbad5f5549e54ac269cc04ce89f212892a98cab; https://git.kernel.org/stable/c/32adb020b0c32939da1322dcc87fc0ae2bc935d1; https://git.kernel.org/stable/c/7e2f3213e85eba00acb4cfe6d71647892d63c3a1
CVE: CVE-2025-39958
Published: 2025-10-09
Description: In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Make attach succeed when the device was surprise removed

When a PCI device is removed with surprise hotplug, there may still be
attempts to attach the device to the default domain as part of tear down
via (__iommu_release_dma_ownership()), or because the removal happens
during probe (__iommu_probe_device()). In both cases zpci_register_ioat()
fails with a cc value indicating that the device handle is invalid. This
is because the device is no longer part of the instance as far as the
hypervisor is concerned.

Currently this leads to an error return and s390_iommu_attach_device()
fails. This triggers the WARN_ON() in __iommu_group_set_domain_nofail()
because attaching to the default domain must never fail.

With the device fenced by the hypervisor no DMAs to or from memory are
possible and the IOMMU translations have no effect. Proceed as if the
registration was successful and let the hotplug event handling clean up
the device.

This is similar to how devices in the error state are handled since
commit 59bbf596791b ("iommu/s390: Make attach succeed even if the device
is in error state") except that for removal the domain will not be
registered later. This approach was also previously discussed at the
link.

Handle both cases, error state and removal, in a helper which checks if
the error needs to be propagated or ignored. Avoid magic number
condition codes by using the pre-existing, but never used, defines for
PCI load/store condition codes and rename them to reflect that they
apply to all PCI instructions.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/359613f2fa[PII_REDACTED]11e4842e8ab9532edd15; https://git.kernel.org/stable/c/9ffaf5229055fcfbb3b3d6f1c7e58d63715c3f73
CVE: CVE-2025-39959
Published: 2025-10-09
Description: In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp: Fix incorrect retrival of acp_chip_info

Use dev_get_drvdata(dev->parent) instead of dev_get_platdata(dev)
to correctly obtain acp_chip_info members in the acp I2S driver.
Previously, some members were not updated properly due to incorrect
data access, which could potentially lead to null pointer
dereferences.

This issue was missed in the earlier commit
("ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot"),
which only addressed set_tdm_slot(). This change ensures that all
relevant functions correctly retrieve acp_chip_info, preventing
further null pointer dereference issues.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/65c5cfbd6d938f77a0df3c34855a4f7d8a61fd10; https://git.kernel.org/stable/c/d7871f400cad1da376f1d7724209a1c49226c456
CVE: CVE-2025-10004
Published: 2025-10-09
Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or severely degraded by sending crafted GraphQL queries requesting large repository blobs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://about.gitlab.com/releases/2025/10/08/patch-release-gitlab-18-4-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/568121; https://hackerone.com/reports/3026555
CVE: CVE-2025-10249
Published: 2025-10-09
Description: The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions in all versions up to, and including, 6.7.37. This makes it possible for authenticated attackers, with Contributor-level access and above, to install and activate plugin add-ons, create sliders, and download arbitrary files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23
References: https://www.sliderrevolution.com/documentation/changelog/; https://www.wordfence.com/threat-intel/vulnerabilities/id/43f2c4e5-c19d-4b7c-849b-47052bb62cb5?source=cve
CVE: CVE-2025-11340
Published: 2025-10-09
Description: GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.
CVSS Score: 7.7 (HIGH)
CWE: CWE-863
References: https://about.gitlab.com/releases/2025/10/08/patch-release-gitlab-18-4-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/567847
CVE: CVE-2025-2934
Published: 2025-10-09
Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have allowed an authenticated attacker to create a denial of service condition by configuring malicious webhook endpoints that send crafted HTTP responses.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://about.gitlab.com/releases/2025/10/08/patch-release-gitlab-18-4-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/528979; https://hackerone.com/reports/3058791
CVE: CVE-2025-9371
Published: 2025-10-09
Description: The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_title’ parameter in all versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping of theme breadcrumbs. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themeforest.net/item/betheme-responsive-multipurpose-wordpress-theme/7758048#item-description__version-28-1-7-september-3rd-2025; https://www.wordfence.com/threat-intel/vulnerabilities/id/f9da9d45-39e2-4b07-baed-1f7d7f67602e?source=cve
CVE: CVE-2025-10239
Published: 2025-10-09
Description: In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://community.progress.com/s/article/CVE-2025-10239
CVE: CVE-2025-10240
Published: 2025-10-09
Description: A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://community.progress.com/s/article/Can-CVE-2025-10240-affect-Progress-Flowmon-appliance