NA - CVE-2025-53889 - Directus is a real-time API and App dashboard...
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.9.0, Directus Flows with a manual trigger are not validating...
NA - CVE-2025-53890 - pyload is an open-source Download Manager...
pyload is an open-source Download Manager written in pure Python. An unsafe JavaScript evaluation vulnerability in pyLoad’s CAPTCHA processing code allows unauthenticated remote attackers to...
NA - CVE-2025-53891 - The timelineofficial/Time-Line- repository...
The timelineofficial/Time-Line- repository contains the source code for the TIME LINE website. A vulnerability was found in the TIME LINE website where uploaded files (instruction/message media)...
High - CVE-2025-6265 - A path traversal vulnerability in the...
A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authenticated attacker with administrator privileges...
Critical - CVE-2025-5393 - The Alone – Charity Multipurpose Non-profit...
The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the...
Critical - CVE-2025-5394 - The Alone – Charity Multipurpose Non-profit...
The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin()...
Critical - CVE-2025-7340 - The HT Contact Form Widget For Elementor Page...
The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...
Critical - CVE-2025-7341 - The HT Contact Form Widget For Elementor Page...
The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in...
Critical - CVE-2025-7360 - The HT Contact Form Widget For Elementor Page...
The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation in the...
Medium - CVE-2025-7367 - The Strong Testimonials plugin for WordPress is...
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Custom Fields in all versions up to, and including, 3.2.11 due to insufficient input...