CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- markus liebelt chess tempo viewerWordPress Chess Tempo Viewer plugin <= 0.9.5 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- pressfore winning portfolioWordPress Winning Portfolio plugin <= 1.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- robert nicholson copyright safeguard footer noticeWordPress Copyright Safeguard Footer Notice plugin <= 3.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability7.1 High
- eiji ‘sabaoh’ yamada rollover tabWordPress Rollover Tab plugin <= 1.3.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- shibu lijack a.k.a cyberjack cj custom contentWordPress CJ Custom Content plugin <= 2.0 - CSRF to Cross-Site Scripting vulnerability7.1 High
- yesstreaming.com shoutcast and icecast internet radio hosting shoutcast and icecast html5 web radio player by yesstreaming.comWordPress Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com plugin <= 3.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- jd7777 daily proverbWordPress Daily Proverb plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- szmake contact form 7 anti spambotWordPress Contact Form 7 Anti Spambot plugin <= 1.0.1 - Broken Access Control vulnerability5.3 Medium
- crea8xion charity-thermometerWordPress Charity-thermometer plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- katz web services, inc. debt calculatorWordPress Debt Calculator plugin <= 1.0.1 - CSRF to Stored XSS vulnerability7.1 High
- alessandro staniscia simple vertical timelineWordPress Simple Vertical Timeline plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- daniel powney hotspots analyticsWordPress Hotspots Analytics plugin <= 4.0.12 - CSRF to Stored XSS vulnerability7.1 High
- nilesh shiragave wordpress gallery pluginWordPress WordPress Gallery Plugin plugin <= 1.4 - CSRF to Stored XSS vulnerability7.1 High
- foo123 top flash embedWordPress Top Flash Embed plugin <= 0.3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jobair jb horizontal scroller news tickerWordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jamsheer k custom widget classesWordPress Custom Widget Classes plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- mobstac qr code generatorWordPress QR Code Generator plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- originaltips.com wordpress data guardWordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerability7.1 High
- pedjas stop comment spamWordPress Stop Comment Spam plugin <= 0.5.3 - CSRF to Stored XSS vulnerability7.1 High
- notfound links/problem reporterWordPress Links/Problem Reporter plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- alexander weleczka fontawesome.io shortcodesWordPress FontAwesome.io ShortCodes plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jprintf cnzz&51la for wordpressWordPress CNZZ&51LA for WordPress plugin <= 1.0.1 - CSRF to Stored XSS vulnerability7.1 High
- alex thorpe easy shortcode buttonsWordPress Easy Shortcode Buttons plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aleapp wp cookies alertWordPress WP Cookies Alert plugin <= 1.1.1 - CSRF to Stored XSS vulnerability7.1 High
- matt gibbs admin cleanupWordPress Admin Cleanup plugin <= 1.0.2 - CSRF to Stored XSS vulnerability7.1 High
- straps strx magic floating sidebar maker, strx magic floating sidebar maker +1 moreWordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerability7.1 High
- laxman thapa content security policy proWordPress Content Security Policy Pro plugin <= 1.3.5 - CSRF to Stored XSS vulnerability7.1 High
- peggy kuo more link modifierWordPress More Link Modifier plugin <= 1.0.3 - CSRF to Cross-Site Scripting vulnerability7.1 High
- alicornea category custom fieldsWordPress Category Custom Fields plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- jim2212001 spiderpowa embed pdfWordPress Spiderpowa Embed PDF plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dutch van andel custom list table exampleWordPress Custom List Table Example Plugin <=1.4.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mahadir ahmad mhr-custom-anti-copyWordPress MHR-Custom-Anti-Copy plugin <= 2.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability7.1 High
- itamarg seoreseller partner, seoreseller team partner +1 moreWordPress SEOReseller Partner plugin <= 1.3.15 - CSRF to Stored XSS vulnerability7.1 High
- igor sazonov len sliderWordPress Len Slider Plugin <= 2.0.11 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- shiv prakash tiwari wp service payment form with authorize.netWordPress WP Service Payment Form With Authorize.net Plugin <= 2.6.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- benjamin guy style adminWordPress Style Admin Plugin <= 1.4.3 - CSRF to Stored XSS vulnerability7.1 High
- mike selander wp options editorWordPress WP Options Editor plugin <= 1.1 - CSRF to Privilege Escalation vulnerability9.8 Critical
- ghuger easy faqsWordPress Easy FAQs plugin <= 3.2.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- stevesoehl wp-revive adserverWordPress WP-Revive Adserver Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- david hamilton orangeboxWordPress OrangeBox plugin <= 3.0.0 - CSRF to Stored XSS vulnerability7.1 High
- tushar patel easy portfolioWordPress Easy Portfolio plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- mikakaltoft horizontal line shortcodeWordPress Horizontal Line Shortcode Plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- rccoder wp amapsWordPress wp_amaps Plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability6.5 Medium
- alpha bpo easy code snippetsWordPress Easy Code Snippets Plugin <= 1.0.2 - SQL Injection vulnerability7.6 High
- august infotech ai responsive gallery albumWordPress AI Responsive Gallery Album plugin <= 1.4 - Broken Access Control vulnerability4.3 Medium
- pravin durugkar user sync activecampaignWordPress User Sync ActiveCampaign plugin <= 1.3.2 - Broken Access Control vulnerability5.4 Medium
- web-mv resadsWordPress ResAds Plugin <= 2.0.5 - SQL Injection vulnerability7.6 High
- willows consulting ltd. gdpr personal data reportsWordPress GDPR Personal Data Reports Plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- eugenio petulla’ imageniusWordPress imaGenius Plugin <= 1.7 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- wwp gmaps for wpbakery page builder freeWordPress GMAPS for WPBakery Page Builder Free Plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…