Week 21, 2025
19 May to 25 May 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 895CVEs publishedin the whole week
- 131CriticalCVSS 9.0 and above
- 306HighCVSS 7.0 to 8.9
- 7Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2025-4632
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write…
Samsung Electronics · MagicINFO 9 Server
ExploitedCritical9.8 - CVE-2023-38950
A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted…
Product not named
ExploitedHigh7.5 - CVE-2025-4428
Remote Code Execution
Ivanti · Endpoint Manager Mobile
ExploitedHigh7.2 - CVE-2025-27920
Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters,…
Srimax · Output Messenger
ExploitedHigh7.2 - CVE-2024-27443
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the…
Product not named
ExploitedMedium6.1 - CVE-2025-4427
Authentication Bypass
Ivanti · Endpoint Manager Mobile
ExploitedMedium5.3 - CVE-2024-11182
Stored XSS vulnerability in MDaemon Email Server
MDaemon · Email Server
ExploitedMedium5.3
Most severe new CVEsBy CVSS score
- CVE-2025-34027
Versa Concerto Authentication Bypass File Write Remote Code Execution
Versa · Concerto
Critical10.0 - CVE-2025-47577
WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability
templateinvaders · TI WooCommerce Wishlist
Critical10.0 - CVE-2025-36535
AutomationDirect MB-Gateway Missing Authentication for Critical Function
AutomationDirect · MB-Gateway
Critical10.0 - CVE-2025-23123
A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the…
Ubiquiti Inc · UniFi Protect Cameras
Critical10.0 - CVE-2025-48200
The sr_feuser_register extension through 12.4.8 for TYPO3 allows Remote Code Execution.
TYPO3 · sr feuser register extension
Critical10.0 - CVE-2025-39401
WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
mojoomla · WPAMS
Critical10.0 - CVE-2025-47637
WordPress STAGGS plugin <= 2.11.0 - Arbitrary File Upload Vulnerability
STAGGS · STAGGS
Critical10.0 - CVE-2025-47687
WordPress StoreKeeper for WooCommerce plugin <= 14.4.4 - Arbitrary File Upload Vulnerability
StoreKeeper B.V. · StoreKeeper for WooCommerce
Critical10.0 - CVE-2025-47642
WordPress Ajar in5 Embed plugin <= 3.1.5 - Arbitrary File Upload Vulnerability
Ajar Productions · Ajar in5 Embed
Critical10.0 - CVE-2025-47641
WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.3.9 - Arbitrary File Upload Vulnerability
printcart · Printcart Web to Print Product Designer for WooCommerce
Critical10.0