Multiple vulnerabilities have been discovered in various products, including AutomationDirect's MB-Gateway, mojoomla's Hospital Management System and WPAMS, TemplateInvaders' TI WooCommerce Wishlist, and others. These vulnerabilities include unrestricted upload of files with dangerous types, deserialization of untrusted data, and improper neutralization of special elements. They can lead to remote code execution, arbitrary file upload, and SQL injection, among other issues. The affected products and versions are listed, along with their corresponding CVE numbers and CVSS scores. The CVSS scores range from 9 to 10, indicating high to critical severity. The vulnerabilities were published between May 19 and May 25, 2025. The affected vendors include AutomationDirect, mojoomla, TemplateInvaders, STAGGS, printcart, Ajar Productions, StoreKeeper B.V., TYPO3, ABB, Canon Inc., and others. The vulnerabilities affect various products, including web servers, printers, and WooCommerce plugins. Users are advised to update their products to the latest patches to prevent potential attacks.