Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
Recent vulnerabilities and exploits
7.5
CVSSv3
CVE-2025-47603
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Belingo belingoGeo allows Path Traversal. This issue affects belingoGeo: from n/a up to and including 1.12.0.
Belingo Belingogeo
8.5
CVSSv3
CVE-2025-47575
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a up to and including 92.0.0.
Mojoomla School Management
9.3
CVSSv3
CVE-2025-47599
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturante Facturante allows SQL Injection. This issue affects Facturante: from n/a up to and including 1.11.
Facturante Facturante
7.1
CVSSv3
CVE-2025-47618
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mortgage Calculator BMI Adult & Kid Calculator allows Reflected XSS. This issue affects BMI Adult & Kid Calculator: from n/a up to and including 1.2.2.
Mortgage Calculator Bmi Adult & Kid Calculator
7.5
CVSSv3
CVE-2025-47558
Missing Authorization vulnerability in RomanCode MapSVG allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects MapSVG: from n/a up to and including 8.5.31.
Romancode Mapsvg
7.5
CVSSv3
CVE-2025-47541
Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a up to and including 1.17.7.
Wpfunnels Mail Mint
9.8
CVSSv3
CVE-2025-47532
Deserialization of Untrusted Data vulnerability in CoinPayments CoinPayments.net Payment Gateway for WooCommerce allows Object Injection. This issue affects CoinPayments.net Payment Gateway for WooCommerce: from n/a up to and including 1.0.17.
Coinpayments Coinpayments.net Payment Gateway For Woocommerce
8.6
CVSSv3
CVE-2025-47535
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpopal Opal Woo Custom Product Variation allows Path Traversal. This issue affects Opal Woo Custom Product Variation: from n/a up to and including 1.2.0.
Wpopal Opal Woo Custom Product Variation
9.8
CVSSv3
CVE-2025-47539
Incorrect Privilege Assignment vulnerability in Themewinter Eventin allows Privilege Escalation. This issue affects Eventin: from n/a up to and including 4.0.26.
Themewinter Eventin
9.8
CVSSv3
CVE-2025-47568
Deserialization of Untrusted Data vulnerability in ZoomIt ZoomSounds allows Object Injection. This issue affects ZoomSounds: from n/a up to and including 6.91.
Zoomit Zoomsounds
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
asterisk
wire-webapp
CVE-2025-4692
cyberdava
CVE-2024-13950
CVE-2025-40775
mobile dynamix
CVE-2024-13949
CVE-2024-13948
CVE-2025-4664
remote attackers
unauthorized
hard-coded
Home
/
Search Results
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »