Skip to content

CyberSecBulletin

CVEs published on November 1, 2025

11 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
Post SMTP – Complete Email Deliverability and…: Missing Authorization
CVE-2025-11833Nov 1, 2025SaadiqbalEPSS 61.5%
8.8 High severity
i: Missing Authorization
CVE-2025-36367Nov 1, 2025IBM
9.8 Critical severity
Tablesome Table – Contact Form DB – WPForms…: Unrestricted Upload of File with Dangerous Type
CVE-2025-11499Nov 1, 2025EssekiaEPSS 1.07%
8.8 High severity
WP Delicious – Recipe Plugin for Food Bloggers…: Unrestricted Upload of File with Dangerous Type
CVE-2025-11755Nov 1, 2025Wpdelicious
8.8 High severity
WPCOM Member: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-11920Nov 1, 2025Whyun
8.8 High severity
RESTful Content Syndication: Unrestricted Upload of File with Dangerous Type
CVE-2025-12171Nov 1, 2025Anthonyeden
8.8 High severity
KALLYAS - Creative eCommerce Multi-Purpose…: Improper Control of Generation of Code
CVE-2025-6990Nov 1, 2025Hogash
8.8 High severity
Service Finder Bookings: Authorization Bypass Through User-Controlled Key
CVE-2025-5949Nov 1, 2025Aonetheme
8.8 High severity
Service Finder Bookings: Authorization Bypass Through User-Controlled Key
CVE-2025-6574Nov 1, 2025Aonetheme
7.3 High severity
Advanced Ads – Ad Manager & AdSense: Improper Control of Generation of Code
CVE-2025-10487Nov 1, 2025Monetizemore
7.2 High severity
Community Events: Improper Neutralization of Input During Web Page Generation
CVE-2025-11995Nov 1, 2025Jackdewey