Veille CVE

Semaine du 3 novembre au 9 novembre 2025

3 CVE sur 19

  1. CVE-2025-62047 9.9 Critique

    Case-Themes Case Addons

    Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.

  2. CVE-2025-58627 9.8 Critique

    kamleshyadav Miraculous Core Plugin

    Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.

  3. CVE-2025-48089 9.3 Critique

    Rainbow-Themes Education WordPress Theme | HiStudy

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through < 3.1.0.