| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-11703 | WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning | wpgmaps | WP Go Maps (formerly WP Google Maps) | Medium | 5.3 | 2025-10-18 06:42:46 | Deep Dive |
| CVE-2020-36853 | 10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change | 10web | 10Web Map Builder for Google Maps | High | 7.2 | 2025-10-18 03:33:24 | Deep Dive |
| CVE-2025-11365 | WP Google Map Plugin <= 1.0 - Authenticated (Contributor+) SQL Injection | akbrohi | WP Google Map Plugin | Medium | 6.5 | 2025-10-15 08:25:59 | Deep Dive |
| CVE-2025-11166 | WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update | wpgmaps | WP Go Maps (formerly WP Google Maps) | Medium | 5.4 | 2025-10-09 01:48:48 | Deep Dive |
| CVE-2025-5009 | Information Disclosure in Gemini iOS App | Gemini | - | - | 2025-10-08 15:31:23 | Deep Dive | |
| CVE-2025-9899 | Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms <= 1.0 - Cross-Site Request Forgery | trustreviews | Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms | Medium | 6.1 | 2025-09-27 06:47:15 | Deep Dive |
| CVE-2025-9816 | WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header | veronalabs | WP Statistics – Simple, privacy-friendly Google Analytics alternative | High | 7.2 | 2025-09-27 04:26:58 | Deep Dive |
| CVE-2025-60186 | WordPress Google+ Comments Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability | Alex Moss | Google+ Comments | Medium | 5.9 | 2025-09-26 08:32:14 | Deep Dive |
| CVE-2025-10892 | Google Chrome 安全漏洞 | Chrome | - | - | 2025-09-24 16:17:46 | Deep Dive | |
| CVE-2025-10891 | Google Chrome 安全漏洞 | Chrome | - | - | 2025-09-24 16:17:46 | Deep Dive | |
| CVE-2025-10890 | Google Chrome 安全漏洞 | Chrome | - | - | 2025-09-24 16:17:45 | Deep Dive | |
| CVE-2025-10501 | Google Chrome 安全漏洞 | Chrome | - | - | 2025-09-24 16:17:13 | Deep Dive | |
| CVE-2025-10502 | Google Chrome 安全漏洞 | Chrome | - | - | 2025-09-24 16:17:13 | Deep Dive | |
| CVE-2025-10585 | Google Chrome 安全漏洞 | Chrome | - | - | 2025-09-24 16:17:12 | Deep Dive | |
| CVE-2025-10500 | Google Chrome 安全漏洞 | Chrome | - | - | 2025-09-24 16:17:12 | Deep Dive | |
| CVE-2025-57935 | WordPress Bot Block – Stop Spam Referrals in Google Analytics Plugin <= 2.6 - Cross Site Scripting (XSS) Vulnerability | Ricky Dawn | Bot Block – Stop Spam Referrals in Google Analytics | Medium | 5.9 | 2025-09-22 18:25:03 | Deep Dive |
| CVE-2025-57984 | WordPress MakeStories (for Google Web Stories) Plugin <= 3.0.4 - Server Side Request Forgery (SSRF) Vulnerability | Pratik Ghela | MakeStories (for Google Web Stories) | Medium | 4.4 | 2025-09-22 18:24:28 | Deep Dive |
| CVE-2025-9877 | Embed Google Datastudio <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | elangovan | Embed Google Datastudio | Medium | 6.4 | 2025-09-12 03:22:44 | Deep Dive |
| CVE-2025-9918 | Zip Slip in Google SecOps SOAR allows for Remote Code Execution | Google Cloud | Google SecOps SOAR | - | - | 2025-09-11 07:37:50 | Deep Dive |
| CVE-2025-9123 | CBX Map for Google Map & OpenStreetMap <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | manchumahara | CBX Map for Google Map & OpenStreetMap | Medium | 6.4 | 2025-09-11 07:25:02 | Deep Dive |