CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- gsheetconnector for forminator forms, westerndeal gsheetconnector for forminator forms +1 moreWordPress GSheetConnector for Forminator Forms Plugin <= 1.0.12 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- farinspace partnersWordPress Partners Plugin <= 0.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- berkman center for internet & society amberWordPress Amber Plugin <=1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dueclic turbosmtpWordPress turboSMTP Plugin <= 4.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- aiwp elementor ai addonsWordPress Elementor AI Addons plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bavington wp headmasterWordPress WP Headmaster Plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- boldgrid post and page builder by boldgrid, post and page builder by boldgrid - visual drag and drop editor +1 moreWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- olaf lederer ajax contact formWordPress Ajax Contact Form plugin <= 1.4.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- codebard help deskWordPress CodeBard Help Desk plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- vipul jariwala wp post correctorWordPress WP Post Corrector Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- octrace wordpress helpdesk & support ticket system plugin – octrace supportWordPress Octrace Support Pro plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- masoud amini zarinpal paid downloadWordPress Zarinpal Paid Download Plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- uri weil wp order byWordPress WP Order By Plugin <= 1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- creative brahma multifoxWordPress Multifox theme <= 1.3.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp chill htaccess file editorWordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability5.3 Medium
- codebycarter wp bulletin boardWordPress WP Bulletin Board Plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- damniel lijit search, lijit networks inc. and crowd favorite search +1 moreWordPress Lijit Search Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- alexey yuzhakov wp-panoWordPress wp-pano Plugin <= 1.17 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- codeaffairs wp news slidersWordPress WP News Sliders plugin <= 1.0 - Broken Access Control vulnerability4.3 Medium
- nativeryWordPress Nativery Plugin plugin <= 0.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- web ready now wr price list manager for woocommerceWordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Remote Code Execution (RCE) vulnerability9.9 Critical
- johan ström background controlWordPress Background Control plugin <= 1.0.5 - CSRF to Arbitrary File Deletion vulnerability8.6 High
- commotion course booking systemWordPress Course Booking System plugin <= 6.0.6 - SQL Injection vulnerability9.3 Critical
- element invader elementinvader addons for elementor, elementinvader addons for elementor +1 moreWordPress ElementInvader Addons for Elementor plugin <= 1.2.6 - Local File Inclusion vulnerability7.5 High
- bplugins button blockWordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability4.3 Medium
- codexpert, inc codesignerWordPress CoDesigner plugin <= 4.29 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bold pagos en lineaWordPress Bold pagos en linea Plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- digitaldonkey multilang contact formWordPress Multilang Contact Form Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- chr designer responsive jquery sliderWordPress Responsive jQuery Slider plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- oğulcan özügenç gallery and lightboxWordPress Gallery and Lightbox plugin <= 1.0.14 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vertim neon product designerWordPress Neon Product Designer Plugin <= 2.2.0 - SQL Injection vulnerability8.5 High
- observiumA cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24...8.7 High
- observiumA html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528...8.7 High
- observiumA cross-site scripting (xss) vulnerability exists in the weather map editor functionality of...8.7 High
- c4.yberpower powerpanel businessCyberPower PowerPanel Business Unauthenticated Restart DoS7.5 High
- linux, linux kernel +1 moreRDMA/siw: Remove direct link to net_device7.8 High
- linux, linux kernel +1 moredrm/xe: Fix fault on fd close after unbind5.5 Medium
- linux, linux kernel +1 morenet: fix memory leak in tcp_conn_request()5.5 Medium
- linux, linux kernel +1 morenetrom: check buffer length before accessing it9.4 Critical
- linux, linux kernel +1 morenet/mlx5e: Skip restore TC rules for vport rep without loaded flag7.8 High
- linux, linux kernel +1 moreRDMA/rxe: Remove the direct link to net_device7.8 High
- linux, linux kernel +1 morenetfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext5.5 Medium
- linux, linux kernel +1 morenvmet: Don't overflow subsysnqn5.5 Medium
- linux, linux kernel +1 morenet: wwan: t7xx: Fix FSM command timeout issue7.8 High
- linux, linux kernel +1 moreRDMA/rtrs: Ensure 'ib_sge list' is accessible9.8 Critical
- linux, linux kernel +1 morenet: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets8.2 High
- linux, linux kernel +1 morenet: restrict SO_REUSEPORT to inet sockets5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreaf_packet: fix vlan_get_tci() vs MSG_PEEK7.3 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreaf_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK7.3 High
- linux, linux kernel +1 moreila: serialize calls to nf_register_net_hooks()7.8 High
- Show moreLoading…