Medium - CVE-2025-5957 - The Guest Support – Complete customer support...
The Guest Support – Complete customer support ticket system for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the...
Medium - CVE-2025-7162 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/add-foreigners-ticket.php....
Medium - CVE-2025-7163 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/add-animals.php. The manipulation of the...
High - CVE-2025-7164 - A vulnerability has been found in...
A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file...
High - CVE-2025-7165 - A vulnerability was found in...
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php....
High - CVE-2025-7327 - The Widget for Google Reviews plugin for...
The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter. This makes it possible for...
Medium - CVE-2025-24002 - An unauthenticated remote attacker can use MQTT...
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations...
High - CVE-2025-24003 - An unauthenticated remote attacker can use MQTT...
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only...
Medium - CVE-2025-24004 - A physical attacker with access to the device...
A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary...