CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure4.3 Medium
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure3.7 Low
- ibm cognos controller, controller +1 moreIBM Cognos Controller improper certificate validation8.2 High
- code-projects online book shopcode-projects Online Book Shop process_login.php sql injection5.3 Medium
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure6.5 Medium
github.com/h44z/wg-portalGoWireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account TakeoverNo score- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure4.3 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Playlist Cover File Upload to Remote Code Execution9.8 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service7.5 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete7.5 High
- code-projects online book shopcode-projects Online Book Shop detail.php sql injection5.3 Medium
- rezgo, rezgo online booking +1 moreWordPress Rezgo Online Booking plugin <= 4.17 - Local File Inclusion vulnerability8.1 High
- theme funda custom field for wp job managerWordPress Custom Field For WP Job Manager plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kmfoysal06 simplecharmWordPress SimpleCharm Theme <= 1.4.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- md. rajib dewan opencart product in wpWordPress Opencart Product in WP plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mindvalley super pagemashWordPress MindValley Super PageMash Plugin <= 1.1 - SQL Injection vulnerability7.6 High
- lich wang wp-tagmakerWordPress WP-tagMaker plugin <= 0.2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- benjamin santalucia (ben@woow-fr.com) wpmu prefill postWordPress WPMU Prefill Post Plugin <= 1.02 - SQL Injection vulnerability7.6 High
- digital zoom studio admin debug wordpress – enable debugWordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerability4.3 Medium
- boldgrid help scoutWordPress Help Scout Plugin <= 6.5.6 - Broken Access Control vulnerability4.3 Medium
- ella van durpe slides & presentationsWordPress Slides & Presentations Plugin <= 0.0.39 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hitesh patel metadata seoWordPress Metadata SEO plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- simon show google analytics widgetWordPress Show Google Analytics widget plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kentothemes justified image galleryWordPress Justified Image Gallery plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ben huson list pages at depthWordPress List Pages at Depth plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- edoc intelligence llc easy tables, jerodmoore edoc easy tables +1 moreWordPress eDoc Easy Tables Plugin <= 1.29 - SQL Injection vulnerability8.5 High
- tock widgetWordPress Tock Widget Plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- roya khosravi singsongWordPress SingSong plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- formafzar فرم ساز فرم افزارWordPress فرم ساز فرم افزار Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- huurkalender wp, huurkalender.nl huurkalender wp +1 moreWordPress Huurkalender WP Plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bharat kambariya donation block for paypalWordPress Donation Block For PayPal Plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wordpresteem we blocksWordPress WE Blocks <= 1.3.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- m bilal m urdu formatter – shamil, mbilalm urdu formatter +1 moreWordPress Urdu Formatter – Shamil plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- portone 아임포트 결제버튼 생성 플러그인WordPress 아임포트 결제버튼 생성 플러그인 plugin <= 1.1.19 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bulktheme wooeximWordPress WOOEXIM Plugin <= 5.0.0 - SQL Injection vulnerability7.6 High
- nagy sandor simple photo sphereWordPress Simple Photo Sphere plugin <= 0.0.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ella van durpe slides & presentationsWordPress Slides & Presentations Plugin <= 0.0.39 - Broken Access Control vulnerability5.4 Medium
- ofek nakar virtual botWordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability7.1 High
- hiren patel wp music playerWordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability7.6 High
- etruel wp delete post copiesWordPress WP Delete Post Copies plugin <= 5.5 - Broken Access Control vulnerability5.4 Medium
- mind doodle visual sitemaps & tasksWordPress Mind Doodle Visual Sitemaps & Tasks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- beautiful templates st gallery wpWordPress ST Gallery WP plugin <= 1.0.8 - Settings Change vulnerability5.4 Medium
- obaid hossain jquery twentytwentyWordPress jQuery TwentyTwenty plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sw-galati.ro iframe to embedWordPress iframe to embed plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jay krishnan g jk html to pdfWordPress JK Html To Pdf plugin <= 1.0.0 - CSRF to Stored XSS vulnerability7.1 High
- pablo cornehl wp githubWordPress WP Github plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- frank koenen ldap login password and role managerWordPress ldap_login_password_and_role_manager plugin <= 1.0.12 - CSRF to Stored XSS vulnerability7.1 High
- addfunc mobile detect, joe rhoney addfunc mobile detect +1 moreWordPress AddFunc Mobile Detect plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bnielsen affiliate disclosure statementWordPress Affiliate Disclosure Statement plugin <= 0.3 - CSRF to Stored XSS vulnerability7.1 High
- albedo0 boot-modalWordPress Boot-Modal plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…