| 115458 | WPMU DEV Dashboard Plugin for WordPress < 5.0.2 Authentication Bypass | critical |
| 115457 | TranslatePress Plugin for WordPress < 3.3.2 Unauthenticated Account Takeover | critical |
| 115456 | Gitea < 1.27.1 Remote Code Execution | critical |
| 115455 | Avada Website Builder Theme for WordPress < 7.16.1 Unauthenticated Arbitrary File Write | critical |
| 115454 | Avada Fusion Builder Plugin for WordPress < 3.16.1 Unauthenticated Arbitrary File Write | critical |
| 115453 | SPIP CMS 4.4.20 Remote Code Execution | critical |
| 115452 | SPIP CMS < 4.4.20 Remote Code Execution | critical |
| 115451 | Pods Plugin for WordPress < 2.8.23.4 Unauthenticated Privilege Escalation | critical |
| 115450 | Pods Plugin for WordPress < 2.9.19.4 Unauthenticated Privilege Escalation | critical |
| 115449 | Pods Plugin for WordPress < 3.0.10.4 Unauthenticated Privilege Escalation | critical |
| 115448 | Pods Plugin for WordPress < 3.1.4.2 Unauthenticated Privilege Escalation | critical |
| 115447 | Pods Plugin for WordPress < 3.2.8.3 Unauthenticated Privilege Escalation | critical |
| 115446 | Pods Plugin for WordPress < 3.3.9.1 Unauthenticated Privilege Escalation | critical |
| 115445 | Elementor Pro Plugin for WordPress < 4.2.2 Arbitrary File Upload | critical |
| 115444 | Zimbra Collaboration < 10.1.20 Remote Code Execution | high |
| 115443 | Microsoft SharePoint Server 2016 < 16.0.5556.1005 Remote Code Execution | critical |
| 115442 | Microsoft SharePoint Server 2019 < 16.0.10417.20153 Remote Code Execution | critical |
| 115441 | Microsoft SharePoint Server 2016 < 16.0.5561.1001 Multiple Vulnerabilities | critical |
| 115440 | Microsoft SharePoint Server 2019 < 16.0.10417.20175 Multiple Vulnerabilities | critical |
| 115439 | GitLab 18.2 < 18.11.11 / 19.0 < 19.0.8 / 19.1 < 19.1.6 / 19.2 < 19.2.4 GraphQL Arbitrary Method Invocation | critical |
| 115435 | Forminator Forms Plugin for WordPress < 1.56.2 Unauthenticated Arbitrary File Upload | critical |
| 115433 | REDCap < 14.9.6 Multiple Vulnerabilities | high |
| 115432 | GeoServer 3.0.0 < 3.0.1 SQL Injection | critical |
| 115431 | GeoServer 2.28.x < 2.28.5 SQL Injection | critical |
| 115430 | GeoServer 2.27.1 < 2.27.6 SQL Injection | critical |
| 115429 | Metabase Enterprise 1.58.x < 1.58.24 SQL Injection | critical |
| 115428 | Metabase 0.58.x < 0.58.24 SQL Injection | critical |
| 115427 | Metabase Enterprise 1.59.x < 1.59.21 SQL Injection | critical |
| 115426 | Metabase 0.59.x < 0.59.21 SQL Injection | critical |
| 115425 | Metabase Enterprise 1.60.x < 1.60.17 SQL Injection | critical |
| 115424 | Metabase 0.60.x < 0.60.17 SQL Injection | critical |
| 115423 | Metabase Enterprise 1.61.x < 1.61.11 SQL Injection | critical |
| 115422 | Metabase 0.61.x < 0.61.11 SQL Injection | critical |
| 115421 | Metabase Enterprise 1.62.x < 1.62.9 SQL Injection | critical |
| 115420 | Metabase 0.62.x < 0.62.9 SQL Injection | critical |
| 115419 | Metabase Enterprise 1.63.x < 1.63.5 SQL Injection | critical |
| 115418 | Metabase 0.63.x < 0.63.5 SQL Injection | critical |
| 115417 | Metabase Enterprise < 1.58.28 Multiple Vulnerabilities | critical |
| 115416 | Metabase < 0.58.28 Multiple Vulnerabilities | critical |
| 115415 | Metabase Enterprise 1.59.x < 1.59.25 Multiple Vulnerabilities | critical |
| 115414 | Metabase 0.59.x < 0.59.25 Multiple Vulnerabilities | critical |
| 115413 | Metabase Enterprise 1.60.x < 1.60.21 Multiple Vulnerabilities | critical |
| 115412 | Metabase 0.60.x < 0.60.21 Multiple Vulnerabilities | critical |
| 115411 | Metabase Enterprise 1.61.x < 1.61.15 Multiple Vulnerabilities | critical |
| 115410 | Metabase 0.61.x < 0.61.15 Multiple Vulnerabilities | critical |
| 115409 | Metabase Enterprise 1.62.x < 1.62.13 Multiple Vulnerabilities | critical |
| 115408 | Metabase 0.62.x < 0.62.13 Multiple Vulnerabilities | critical |
| 115407 | Metabase Enterprise 1.63.x < 1.63.10 Multiple Vulnerabilities | critical |
| 115406 | Metabase 0.63.x < 0.63.10 Multiple Vulnerabilities | critical |
| 115405 | WordPress 4.7.x < 4.7.35 Remote Code Execution | high |