CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- ekaterir cache sniper for nginxWordPress Cache Sniper for Nginx plugin <= 1.0.4.2 - Broken Access Control vulnerability4.3 Medium
- w3speedsterWordPress W3SPEEDSTER plugin <= 7.33 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- carrotbits greek namedays widget from eortologio.netWordPress Greek Namedays Widget Plugin <= 20191113 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- revolutionart marmoset viewerWordPress Marmoset Viewer plugin <= 1.9.3 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- mahdi khaksar mybb last topicsWordPress mybb Last Topics plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- artanik hack me if you canWordPress Hack me if you can plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- tussendoor b.v. call me nowWordPress Call me Now plugin <= 1.0.5 - CSRF to Stored XSS vulnerability7.1 High
- martijn scheybeler social analyticsWordPress Social Analytics plugin <= 0.2 - CSRF to Stored XSS vulnerability7.1 High
- itmooti theme my ontraport smartformWordPress Theme My Ontraport Smartform plugin <= 1.2.11 - CSRF to Stored XSS vulnerability7.1 High
- marco castelluccio web pushWordPress Web Push plugin <= 1.4.0 - CSRF to Stored XSS vulnerability7.1 High
- kapostWordPress Kapost plugin <= 2.2.9 - CSRF to Stored XSS vulnerability7.1 High
- schalk burger anonymize linksWordPress Anonymize Links plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- raymonddesign post & page notesWordPress Post & Page Notes plugin <= 0.1.1 - CSRF to Stored XSS vulnerability7.1 High
- mayur sojitra flying twitter birdsWordPress Flying Twitter Birds plugin <= 1.8 - CSRF to Stored XSS vulnerability7.1 High
- cs : abs-hosting.nl / walchum.net free mailclient fmcWordPress Free MailClient FMC plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- dominic fallows df draggableWordPress DF Draggable plugin <= 1.13.2 - CSRF to Stored XSS vulnerability7.1 High
- ivanra10 wp custom google searchWordPress WP Custom Google Search plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- shabbos commerce and yom tov, shabboscommerce shabbos and yom tov +1 moreWordPress Shabbos and Yom Tov plugin <= 1.9 - CSRF to Stored XSS vulnerability7.1 High
- techmix event countdown timer plugin by techmixWordPress Event Countdown Timer Plugin by TechMix plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- artanik slider for writersWordPress Slider for Writers plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- artkanmedia book a placeWordPress Book a Place plugin <= 0.7.1 - CSRF to Stored XSS vulnerability7.1 High
- sana ullah import users to mailchimpWordPress Import Users to MailChimp plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- poco blogger image importWordPress Blogger Image Import plugin <= 2.1 - CSRF to Stored XSS vulnerability7.1 High
- dsmidge http to https link changer by eyga.netWordPress HTTP to HTTPS link changer by Eyga.net plugin <= 0.2.4 - CSRF to Stored XSS vulnerability7.1 High
- dkukral email on publishWordPress Email on Publish plugin <= 1.5 - CSRF to Stored XSS vulnerability7.1 High
- stanisław skonieczny secure captchaWordPress Secure CAPTCHA plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- braulio aquino send to twitterWordPress Send to Twitter plugin <= 1.7.2 - CSRF to Stored XSS vulnerability7.1 High
- rapid sort rsv gmapsWordPress RSV GMaps plugin <= 1.5 - CSRF to Stored XSS vulnerability7.1 High
- justin kuepper quotemedia toolsWordPress QuoteMedia Tools plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ryan sutana nv sliderWordPress NV Slider plugin <= 1.6 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- kreg steppe auphonic importerWordPress Auphonic Importer plugin <= 1.5.1 - CSRF to Stored XSS vulnerability7.1 High
- krolow twitter postWordPress Twitter Post plugin <= 0.1 - CSRF to Stored XSS vulnerability7.1 High
- real seguro viagem seguro viagemWordPress Real Seguro Viagem plugin <= 2.0.5 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- walter cerrudo mfpluginWordPress MFPlugin plugin <= 1.3 - CSRF to Cross-Site Scripting vulnerability7.1 High
- ryan sutana wp panoramioWordPress WP Panoramio plugin <= 1.5.0 - CSRF to Cross-Site Scripting vulnerability7.1 High
- hernan javier hegykozi mercadolibre integrationWordPress MercadoLibre Integration plugin <= 1.1 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- pflonk sidebar-content from shortcodeWordPress Sidebar-Content from Shortcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nazmul ahsan rename author slugWordPress Rename Author Slug plugin <= 1.2.0 - CSRF to Stored XSS vulnerability7.1 High
- powiet powie's plinks pagepeekerWordPress Powie's pLinks PagePeeker plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mahesh bisen contact form 7 – ccavenue add-onWordPress Contact Form 7 – CCAvenue Add-on plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- frenchsquared comment-emailerWordPress Comment-Emailer plugin <= 1.0.5 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- mdc youtube downloader project youtube downloader, nazmul ahsan mdc youtube downloader +1 moreWordPress MDC YouTube Downloader plugin <= 3.0.0 - CSRF to Stored XSS vulnerability7.1 High
- andrea brandi twitter shortcodeWordPress Twitter Shortcode plugin <= 0.9 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- sam burdge wp background tileWordPress WP Background Tile plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- sourov amin word freshenerWordPress Word Freshener plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- cybio floatbox plusWordPress Floatbox Plus plugin <= 1.4.4 - CSRF to Stored XSS vulnerability7.1 High
- stepan stepasyuk memeoneWordPress MemeOne plugin <= 2.0.5 - CSRF to Stored XSS vulnerability7.1 High
- intuitive design gdresellerWordPress GDReseller plugin <= 1.6 - CSRF to Stored XSS vulnerability7.1 High
- kelvin ng shortcode in commentWordPress Shortcode in Comment plugin <= 1.1.1 - CSRF to Stored XSS vulnerability7.1 High
- peter shaw lh login pageWordPress LH Login Page plugin <= 2.14 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…