CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- drupal file entity (fieldable files), file entity project entity +1 moreFile Entity (fieldable files) - Moderately critical - Cross Site Scripting, Access bypass - SA-CONTRIB-2024-0015.4 Medium
- micahparks jwksetJWK Set's HTTP client only overwrites and appends JWK to local cache during refresh2.1 Low
- chatwootChatwoot has a Blind SQL-injection in Conversation and Contacts filters9.1 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash7.1 High
- juniper junos os evolvedJunos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash6.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Low privileged user able to access highly sensitive information on file system6.8 Medium
- tripetto wordpress form builder plugin for contact forms, surveys and quizzes – tripettoWordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- otwthemes widgetize pages lightWordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- acowebs product table for woocommerceWordPress Product Table for WooCommerce plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- p3jx cf7save extensionWordPress Cf7Save Extension plugin <= 1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mahesh waghmare mg parallax sliderWordPress MG Parallax Slider plugin <= 1.0. - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tobias spiess ts comfort dbWordPress TS Comfort DB plugin <= 2.0.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jumpdemand 4ecps web formsWordPress 4ECPS Web Forms Plugin <= 0.2.18 - Arbitrary File Upload vulnerability10.0 Critical
- opentracker analyticsWordPress Opentracker Analytics Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- roninwp fat event liteWordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability8.1 High
- crispweb nc wishlist for woocommerceWordPress NC Wishlist for Woocommerce Plugin <= 1.0.1 - SQL Injection vulnerability8.5 High
- scott farrell wp hosting performance checkWordPress wp Hosting Performance Check Plugin <= 2.18.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kkarpieszuk wc price history for omnibusWordPress WC Price History for Omnibus plugin <= 2.1.4 - PHP Object Injection vulnerability7.2 High
- jonathan kern wplistcalWordPress WPListCal Plugin <= 1.3.5 - SQL Injection vulnerability8.5 High
- yamna khawaja mailing group listservWordPress Mailing Group Listserv Plugin <= 2.0.9 - SQL Injection vulnerability7.6 High
- traveller11 google maps travel routeWordPress Google Maps Travel Route Plugin <= 1.3.1 - SQL Injection vulnerability8.5 High
- seballero emailing subscriptionWordPress Emailing Subscription Plugin <= 1.4.1 - SQL Injection vulnerability9.3 Critical
- ka2 custom database tablesWordPress Custom DataBase Tables Plugin <= 2.1.34 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ofek nakar virtual botWordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability9.3 Critical
- hccoder better user shortcodesWordPress Better User Shortcodes Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jason funk title experiments freeWordPress Title Experiments Free plugin <= 9.0.4 - Broken Access Control vulnerability4.3 Medium
- hasthemes free woocommerce theme 99fy extensionWordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yamna khawaja mailing group listservWordPress Mailing Group Listserv Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- villatheme advanced product information for woocommerceWordPress Advanced Product Information for WooCommerce plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- add-ons.org email templates customizer for wordpress – drag and drop email templates builder – yeemailWordPress Email Templates Customizer YeeMail plugin <= 2.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- paul bearne author avatars list/blockWordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- modernaweb black widgets for elementorWordPress Black Widgets For Elementor plugin <= 1.3.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themepoints skill barWordPress Skill Bar Plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- surbma | premium wpWordPress Surbma | Premium WP plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- robert responsive flickr slideshowWordPress Responsive Flickr Slideshow Plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gravity master pdf catalog woocommerceWordPress PDF Catalog Woocommerce plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cristian stan mt addons for elementorWordPress MT Addons for Elementor plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cbb team content blocks builderWordPress Content Blocks Builder plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- chatbot for wordpress - wpbot conversational forms for chatbotWordPress ChatBot Conversational Forms plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aezaz shaikh news ticker widget for elementorWordPress News Ticker Widget for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dylan james zephyr admin themeWordPress Zephyr Admin Theme Plugin <= 1.4.1 - CSRF to Stored XSS vulnerability7.1 High
- bplugins button blockWordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- s3bubble s3player – woocommerce & elementor integrationWordPress S3Player plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- venutius bp profile shortcodes extraWordPress BP Profile Shortcodes Extra plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- 4wpbari qr code and barcode scanner readerWordPress Qr Code and Barcode Scanner Reader plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- vfthemes storepressWordPress StorePress theme <= 1.0.12 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- daniel walmsley vr viewsWordPress VR Views plugin <= 1.5.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…