Daily digest

Saturday 25 October 2025

A quiet day: only 1 new CVEs against a recent average of about 11.

New CVEs

Critical

KEV additions

Records changed

New this day, ranked by depth score

The 1 that matter most of the 1 published.

CVE-2025-11255Medium· 4.3

11mo ago

The Password Policy Manager | Password Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'moppm_ajax' AJAX endpoint in all versions up to, and including, 2.0.5

The Password Policy Manager | Password Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'moppm_ajax' AJAX endpoint in all versions up to, and including, 2.0.5. This …

▾ SunlitEPSS 0.20%via NVD