CVE-2025-20051, CVE-2025-24490, and CVE-2025-25279 could allow attackers to read arbitrary files on the system and execute SQL injection attacks
SQL injection attacks
Learn about CVE-2025-26794, a new vulnerability in Exim that allows remote SQL injection attacks on specific configurations.
CVE-2024-3820, rated with a maximum severity score of 10 (CVSS 10), could allow attackers to inject malicious SQL code
The ability for unauthenticated attackers to execute arbitrary code (CVE-2024-29822 through CVE-2024-29827) could lead to complete system takeover
Identified as CVE-2023-48738 and rated 9.3 on the CVSS scale, this vulnerability was a ticking time bomb in the Porto theme's code.