CVE Severity Distribution (Last 30 Days)
Found 11 CVEs in the last 30 days.
CVE-2025-3248
CRITICAL
CVSS: 9.8
EPSS: 100.0%
VulnCheck KEV
Weaponized
Ransomware
Metasploit
ExploitDB
CWE-306
CWE-94
CWE-306
T1059
T1078
Langflow versions prior to 1.3.0 are susceptible to code injection in
the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary
code.
Published: 2025-04-07
CVE-2025-32480
UNKNOWN
EPSS: 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in dalziel Windows Live Writer windows-live-writer allows Stored XSS.This issue affects Windows Live Writer: from n/a through <= 0.1.
Published: 2025-04-09
CVE-2025-32481
UNKNOWN
EPSS: 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in ninotheme Nino Social Connect nino-social-connect allows Stored XSS.This issue affects Nino Social Connect: from n/a through <= 2.0.
Published: 2025-04-09
CVE-2025-32482
UNKNOWN
EPSS: 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in quanganhdo Custom Smilies custom-smilies allows Stored XSS.This issue affects Custom Smilies: from n/a through <= 1.2.
Published: 2025-04-09
CVE-2025-32483
UNKNOWN
EPSS: 0.4%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Salisbury Request Call Back request-call-back allows Stored XSS.This issue affects Request Call Back: from n/a through <= 1.4.1.
Published: 2025-04-09
CVE-2025-32484
UNKNOWN
EPSS: 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WP-Planification wp-planification allows Stored XSS.This issue affects WP-Planification: from n/a through <= 2.3.1.
Published: 2025-04-09
CVE-2025-32485
UNKNOWN
EPSS: 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in Bjoern WP Performance Pack wp-performance-pack allows Cross Site Request Forgery.This issue affects WP Performance Pack: from n/a through <= 2.5.4.
Published: 2025-04-09
CVE-2025-32486
UNKNOWN
EPSS: 0.3%
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hossein Material Dashboard material-dashboard.This issue affects Material Dashboard: from n/a through <= 1.4.6.
Published: 2025-09-09
CVE-2025-32487
UNKNOWN
EPSS: 0.3%
Server-Side Request Forgery (SSRF) vulnerability in Joe Waymark waymark allows Server Side Request Forgery.This issue affects Waymark: from n/a through <= 1.5.2.
Published: 2025-04-09
CVE-2025-32488
UNKNOWN
EPSS: 0.4%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in آریا وردپرس Aria Font aria-font allows Stored XSS.This issue affects Aria Font: from n/a through <= 1.4.
Published: 2025-04-09
CVE-2025-32489
UNKNOWN
EPSS: 0.4%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Wetterwarner wetterwarner allows Stored XSS.This issue affects Wetterwarner: from n/a through <= 2.7.3.
Published: 2025-04-09