Advisories · Critical
What needs attention now.
A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.
- KEV
It’s in CISA’s KEV catalogue
CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- CVSS 9+
Its CVSS score is 9.0 or more
The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- CVSS 7+ and EPSS
CVSS 7.0 or more, and EPSS 0.1 or more
A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.
Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check your lockfile or follow this list with RSS.
- CVSS 9.4 CriticalCritical · CVSS 9+
Linksys E1700 setVlan stack-based overflow
- Linksys E1700
- Memory corruption
- CVSS 10.0 CriticalCritical · CVSS 9+
Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow
- Linksys E1700
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy
- Apache Software Foundation Apache SkyWalking BanyanDB
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication
- OTRS
- OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
Insufficient Session Revocation for JWT Authentication
- OTRS
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection
- TRENDnet TEW-751DR
- TRENDnet TEW-752DRU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key
- SciSharp BotSharp
- Hard-coded credentials
- CVSS 9.3 CriticalCritical · CVSS 9+
Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose
- agnai
- Hard-coded credentials
- CVSS 10.0 CriticalCritical · CVSS 9+
TOZED X300 IPPingDiagnostics process_ping os command injection
- TOZED X300
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
OpenSpug File Transfer transfer os command injection
- Spug
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup
- Insurify
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update
- Quick quotes
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign
- Insurify
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion
- AI Content Generator Marketing
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter
- Freeton WP
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter
- Mindstien Quick Login
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update
- click5 CRM add-on to Contact Form 7
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update
- click5 CRM add-on to Gravity Forms
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update
- click5 CRM add-on to WPForms
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update
- click5 CRM add-on to Ninja Forms
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Fundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure
- Fundiin cho WooCommerce
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE
- Anton Extensions
- Unrestricted file upload
- CVSS 9.3 CriticalCritical · CVSS 9+
Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect
- WuKongOpenSource Wukong_HRM
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability
- ThemeRex Buzz Stone | Magazine & Viral Blog WordPress Theme
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability
- ThemeRex Photolia
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability
- AncoraThemes Qwery
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability
- ThemeREX Jacqueline
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability
- ThemeREX Alliance
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability
- axiomthemes Kicker
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability
- axiomthemes Original
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability
- AncoraThemes Anesta
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability
- axiomthemes FC United
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability
- ThemeREX ShiftCV
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability
- ThemeREX Windsor
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability
- ThemeREX Education Center
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability
- AncoraThemes Drone Media
- Insecure deserialization
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability
- WPFunnels Creator LMS
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability
- ThemeREX Asia Garden
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability
- ThemeREX N7 | Golf Club Sports & Events
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability
- ThemeREX Invetex
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability
- ThemeREX Law Office
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability
- ThemeREX WineShop
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability
- ThemeREX Equadio
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability
- ThemeREX Juno
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability
- BoldThemes Avala
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
- The4 Kalles
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability
- ThemeREX Yacht Rental
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability
- ThemeREX Wine House
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability
- ThemeREX Tipsy
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability
- ThemeREX Stargaze
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability
- ThemeREX Splendour
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability
- Designinvento DirectoryPress
- File inclusion
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
- Stylemix uListing
- SQL injection
- CVSS 9.0 CriticalCritical · CVSS 9+
WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability
- Tailored Media Tailored Tools
- Unrestricted file upload
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability
- CodeBard Help Desk
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability
- Select-Themes Tonda Membership
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability
- AncoraThemes CleanSkin
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability
- Sarah Giles Dynamic User Directory
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability
- Pluggabl Booster for WooCommerce
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability
- Payever - WooCommerce Gateway
- Insecure deserialization