LIVE · cybersecurity feed
Live wire
OpenAI Announced $1B in Defensive Tools for Water UtilitiesAttackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS CredentialsCVE-2026-59346 · Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host CodeCVE-2026-32475 · Elementor Pro WordPress Plugin Vulnerability Exploited to Hack SitesBroadcom Patches Critical VMware Workstation and Fusion VM-Escape VulnerabilitiesHackers Leak Millions of Airport Passenger Records After Ransom RefusalUsing a VM to Contain an AI AgentCVE-2026-73749 · HPE Patches Critical RCE Vulnerabilities in AOS-CXCompanies Have Six Months to Prepare for Automated AttacksPhishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
vendor

Raytha

11 CVEs published in the last four months. Exploited flaws first.

Critical1
High2
Medium7
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2025-692469.8criticalraythaRaytha CMS does not have any brute force protection mechanism implemented.173d ago
CVE-2025-155408.8highraytha"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.173d ago
CVE-2025-692408.8highraythaRaytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker controlled domain.173d ago
CVE-2025-692456.1mediumraythaRaytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.173d ago
CVE-2025-692426.1mediumraythaRaytha CMS is vulnerable to reflected XSS via the backToListUrl parameter.173d ago
CVE-2025-692415.4mediumraythaRaytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.173d ago
CVE-2025-692375.4mediumraythaRaytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.173d ago
CVE-2025-692365.4mediumraythaRaytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.173d ago
CVE-2025-692435.3mediumraythaRaytha CMS is vulnerable to User Enumeration in password reset functionality.173d ago
CVE-2025-692384.3mediumraythaRaytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.173d ago
CVE-2025-692392.7lowraythaRaytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.173d ago

Filter the full tracker by Raytha →