Semaine du 3 novembre au 9 novembre 2025
3 CVE sur 19
-
CVE-2025-62047 9.9 Critique
Case-Themes Case Addons
Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.
-
CVE-2025-58627 9.8 Critique
kamleshyadav Miraculous Core Plugin
Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.
-
CVE-2025-48089 9.3 Critique
Rainbow-Themes Education WordPress Theme | HiStudy
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through < 3.1.0.