Multiple vulnerabilities were reported on May 13th and 15th, 2025, affecting various software products. The UiPress Lite WordPress plugin has a remote code execution vulnerability allowing authenticated attackers to execute arbitrary code with a CVSS score of 8.8. Adobe Connect is vulnerable to cross-site scripting, potentially leading to session takeover with a CVSS score of 9.3. Several Adobe products, including Animate, Bridge, Dimension, Dreamweaver, Illustrator, InDesign, Lightroom, Photoshop, and Substance3D, have vulnerabilities that could result in arbitrary code execution. These Adobe vulnerabilities often require user interaction, such as opening a malicious file, and have CVSS scores of 7.8. Adobe ColdFusion has multiple vulnerabilities, including improper input validation, incorrect authorization, and OS command injection, potentially leading to arbitrary code execution with CVSS scores of 9.1. Some ColdFusion vulnerabilities also include improper access control that could lead to arbitrary file system read. One ColdFusion vulnerability requires user interaction and has a CVSS score of 8.4. These vulnerabilities could allow attackers to bypass security mechanisms or gain unauthorized access to sensitive data. Exploitation of these vulnerabilities could lead to arbitrary code execution in the context of the current user.