| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-1539 | D-Link DAP-1320 storagein.pd-XXXXXX replace_special_char stack-based overflow | D-Link | DAP-1320 | High | 8.8 | 2025-02-21 15:00:15 | Deep Dive |
| CVE-2025-1538 | D-Link DAP-1320 api set_ws_action heap-based overflow | D-Link | DAP-1320 | High | 8.8 | 2025-02-21 15:00:09 | Deep Dive |
| CVE-2024-13556 | Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection | wecantrack | Affiliate Links – Link Cloaking and Management | High | 8.1 | 2025-02-18 05:22:27 | Deep Dive |
| CVE-2025-1392 | D-Link DIR-816 index.html cross site scripting | D-Link | DIR-816 | Low | 3.5 | 2025-02-17 15:31:04 | Deep Dive |
| CVE-2025-1099 | Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera | TP-Link | Tapo C500 V1 Wi-Fi Camera | 中危 | - | 2025-02-10 10:44:26 | Deep Dive |
| CVE-2025-1104 | D-Link DHP-W310AV authentication spoofing | D-Link | DHP-W310AV | High | 7.3 | 2025-02-07 16:31:05 | Deep Dive |
| CVE-2025-1103 | D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference | D-Link | DIR-823X | Medium | 6.5 | 2025-02-07 15:00:10 | Deep Dive |
| CVE-2025-25148 | WordPress Read More Copy Link plugin <= 1.0.2 - CSRF to Stored XSS vulnerability | ElbowRobo | Read More Copy Link | High | 7.1 | 2025-02-07 10:11:51 | Deep Dive |
| CVE-2025-25116 | WordPress Link to URL / Post plugin <=1.3 - SQL Injection vulnerability | sudipto | Link to URL / Post | High | 7.6 | 2025-02-07 10:11:45 | Deep Dive |
| CVE-2025-23989 | WordPress Internal Link Builder plugin <= 1.0 - CSRF to Stored XSS vulnerability | Alessandro Piconi | Internal Link Builder | High | 7.1 | 2025-01-31 08:23:57 | Deep Dive |
| CVE-2025-0809 | Link Fixer <= 3.4 - Unauthenticated Stored Cross-Site Scripting | kpgraham | Link Fixer | High | 7.2 | 2025-01-31 05:22:33 | Deep Dive |
| CVE-2025-0804 | ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | clickwhale | ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages | Medium | 6.4 | 2025-01-29 03:21:24 | Deep Dive |
| CVE-2025-0730 | TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings | TP-Link | TL-SG108E | Low | 3.7 | 2025-01-27 17:00:14 | Deep Dive |
| CVE-2025-0729 | TP-Link TL-SG108E clickjacking | TP-Link | TL-SG108E | Medium | 4.3 | 2025-01-27 17:00:11 | Deep Dive |
| CVE-2024-13404 | Link Library <= 7.7.2 - Reflected Cross-Site Scripting | jackdewey | Link Library | Medium | 6.1 | 2025-01-21 09:21:11 | Deep Dive |
| CVE-2025-23818 | WordPress More Link Modifier plugin <= 1.0.3 - CSRF to Cross-Site Scripting vulnerability | pyko | More Link Modifier | High | 7.1 | 2025-01-16 20:07:11 | Deep Dive |
| CVE-2025-23677 | WordPress HTTP to HTTPS link changer by Eyga.net plugin <= 0.2.4 - CSRF to Stored XSS vulnerability | DSmidge | HTTP to HTTPS link changer by Eyga.net | High | 7.1 | 2025-01-16 20:06:39 | Deep Dive |
| CVE-2025-23470 | WordPress Visit Site Link enhanced plugin <= 1.0 - CSRF to Stored XSS vulnerability | xavsio4 | Visit Site Link enhanced | High | 7.1 | 2025-01-16 20:05:48 | Deep Dive |
| CVE-2025-0492 | D-Link DIR-823X FUN_00412244 null pointer dereference | D-Link | DIR-823X | High | 7.5 | 2025-01-15 22:00:17 | Deep Dive |
| CVE-2025-0481 | D-Link DIR-878 HTTP POST Request dllog.cgi information disclosure | D-Link | DIR-878 | Medium | 5.3 | 2025-01-15 19:00:14 | Deep Dive |