CVE-2025-43004 Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)

Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards PODs that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view...

PT-2025-20816 · Sap Se · Sap Digital Manufacturing

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A security misconfiguration issue allows customers to create Production Operator Dashboards PODs that permit outside users to access customer data without proper authentication. This enables...

WordPress Credova_Financial plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by astra.r3verii in WordPress Plugin CredovaFinancial versions = 2.5.0...

WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by R4mbb in WordPress Plugin Meow Gallery versions = 5.2.7...

Security Misconfiguration Detected (Medium)

Security misconfigurations present a risk of increased attack surface by allowing malicious entities to communicate with the target assets. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Security Misconfiguration Detected (Low)

Security misconfigurations present a risk of increased attack surface by allowing malicious entities to communicate with the target assets. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Security Misconfiguration Detected (High)

Security misconfigurations present a risk of increased attack surface by allowing malicious entities to communicate with the target assets. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Security Misconfiguration Detected (Critical)

Security misconfigurations present a risk of increased attack surface by allowing malicious entities to communicate with the target assets. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

WordPress AnalyticsWP plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin AnalyticsWP versions = 2.1.2...

WordPress Kadence WooCommerce Email Designer plugin <= 1.5.14 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin Kadence WooCommerce Email Designer versions = 1.5.14...

WordPress Fast eBay Listings plugin <= 2.12.15 - Open Redirection Vulnerability

Open Redirection Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Fast eBay Listings versions = 2.12.15...

WordPress Real Estate Manager plugin <= 7.3 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by theviper17 in WordPress Plugin Real Estate Manager versions = 7.3...

WordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by astra.r3verii in WordPress Plugin Material Dashboard versions = 1.4.6...

WordPress WPJobBoard plugin < 5.11.1 - Path Traversal vulnerability

Path Traversal vulnerability discovered by Ananda Dhakal in WordPress Plugin WPJobBoard versions 5.11.1...

WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability

Full Path Disclosure FPD vulnerability discovered by astra.r3verii in WordPress Plugin Squeeze versions = 1.6...

WordPress Simple Post Meta Manager Plugin <= 1.0.9 - CSRF to Reflected Cross-Site Scripting vulnerability

CSRF to Reflected Cross-Site Scripting vulnerability discovered by thiennv in WordPress Plugin Simple Post Meta Manager versions = 1.0.9...

WordPress Accessibility Suite plugin <= 4.18 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by theviper17 in WordPress Plugin Accessibility Suite versions = 4.18...

WordPress Revive.so plugin <= 2.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by theviper17 in WordPress Plugin Revive.so versions = 2.0.3...

WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Sparkle Elementor Kit versions = 2.0.9...

WordPress Wigi Theme <= 2.0.1 is vulnerable to Arbitrary File Upload

Software Wigi Type Theme Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Upload CVE CVE-2025-30996 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID a3f5b750c9b1 Credits Tran Nguyen Bao Khanh VCI - VNPT...