CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- arul pdf.js shortcodeWordPress PDF.js Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- meinturnierplan meinturnierplan.de widget viewer, meinturnierplan.de team widget viewer +1 moreWordPress MeinTurnierplan.de Widget Viewer plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- divengine gallery: hybrid – advanced visual galleryWordPress Gallery: Hybrid – Advanced Visual Gallery plugin <= 1.4.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- m.j wp-playerWordPress WP-Player plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- promosimple giveaways and contests by promosimpleWordPress Giveaways and Contests by PromoSimple plugin <= 1.24 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- horiyuki image switcherWordPress jupdf pdf viewer plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aleksandar arsovski google org chartWordPress Google Org Chart plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jeremy wp photo sphereWordPress WP Photo Sphere plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- fengler magic google maps, magic plugin factory google maps +1 moreWordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpfreeware wpf ultimate carouselWordPress WpF Ultimate Carousel plugin <= 1.0.11 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- itechart-group paypal marketing solutionsWordPress PayPal Marketing Solutions plugin <= 1.2 - Broken Access Control vulnerability4.3 Medium
- chandrika guntur, morgan kay chamber dashboard business directoryWordPress Chamber Dashboard Business Directory Plugin <= 3.3.8 - Broken Access Control vulnerability5.4 Medium
- harun r. rayhan (cr@zy coder) cc circle progress barWordPress CC Circle Progress Bar plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jimmy peña feedburner optin formWordPress Feedburner Optin Form plugin <= 0.2.8 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- massimo serpilli incredible font awesomeWordPress Incredible Font Awesome plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- wishfulthemes email capture & lead generationWordPress Email Capture & Lead Generation Plugin <= 1.0.2 - Broken Access Control vulnerability4.3 Medium
- harsh ispring embedderWordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerability10.0 Critical
- roninwp fat event liteWordPress FAT Event Lite plugin <= 1.1 - Authenticated Non-Arbitrary Local File Inclusion vulnerability7.5 High
- tc ajax wp query search filterWordPress Ajax WP Query Search Filter plugin <= 1.0.7 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- nuanced media wp meetupWordPress WP Meetup plugin <= 2.3.0 - Settings Change vulnerability5.4 Medium
- ella van durpe slides & presentationsWordPress Slides & Presentations Plugin <= 0.0.39 - Content Injection vulnerability5.4 Medium
- philipp speck wordpress custom sidebarWordPress WordPress Custom Sidebar Plugin <= 2.3 - SQL Injection vulnerability8.5 High
- cybio gravatarlocalcacheWordPress GravatarLocalCache plugin <= 1.1.2 - CSRF to Stored XSS vulnerability7.1 High
- pankajpragma wordpress google map professionalWordPress Google Map Professional Plugin <= 1.0 - SQL Injection vulnerability8.5 High
- solidres – hotel booking pluginWordPress Solidres – Hotel booking plugin for WordPress Plugin <= 0.9.4 - SQL Injection vulnerability8.5 High
- common ninja compare ninjaWordPress Compare Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rami yushuvaev pastebinWordPress Pastebin plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- genkisan genki announcementWordPress Genki Announcement plugin <= 1.4.1 - CSRF to Stored XSS vulnerability7.1 High
- taras dashkevych error notificationWordPress Error Notification plugin <= 0.2.7 - CSRF to Stored XSS vulnerability7.1 High
- bnb select ltd bookaletWordPress Bookalet plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ivo brett – applymetrics apply with linkedin buttonsWordPress Apply with LinkedIn buttons plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ivo brett – applymetrics apply with linkedin buttonsWordPress Apply with LinkedIn buttons plugin <= 2.3 - CSRF to Stored XSS vulnerability7.1 High
- scott allan wallick blog summaryWordPress Blog Summary plugin <= 0.1.2 β - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vincent loy yet another countdownWordPress Yet Another Countdown Plugin plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- alex furr progress trackerWordPress Progress Tracker plugin <= 0.9.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- chris roberts annieWordPress Annie plugin <= 2.1.1 - CSRF to Stored XSS vulnerability7.1 High
- oncle tom mindmeister shortcodeWordPress Mindmeister Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tom ewer easy tweet embedWordPress Easy Tweet Embed plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dan cameron add rssWordPress Add RSS plugin <= 1.5 - CSRF to Stored XSS vulnerability7.1 High
- jens remus wp krpanoWordPress WP krpano plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- manny costales gmap shortcodeWordPress GMap Shortcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- madeglobal better protected pagesWordPress Better Protected Pages plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- chris roberts annieWordPress Annie plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- anmari amr personaliseWordPress amr personalise plugin <= 2.10 - CSRF to Stored XSS vulnerability7.1 High
- scott reilly post-to-post linksWordPress Post-to-Post Links plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- anshi solutions category d3 treeWordPress Category D3 Tree plugin <= 1.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- nitethemes nite shortcodesWordPress Nite Shortcodes plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- payformWordPress PayForm plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1 High
- luke america wcs qr code generatorWordPress WCS QR Code Generator plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- bas matthee lsd google maps embedderWordPress LSD Google Maps Embedder plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- Show moreLoading…