CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- marko-m quick countWordPress Quick Count Plugin <= 3.00 - PHP Object Injection vulnerability9.8 Critical
- notfound wordpress local seoWordPress WordPress Local SEO plugin <= 2.3 - SQL Injection vulnerability9.3 Critical
- sh1zen multi uploader for gravity formsWordPress Multi Uploader for Gravity Forms plugin <= 1.1.3 - Arbitrary File Upload vulnerability9.0 Critical
- enrico sandoli smallerik file browserWordPress Smallerik File Browser plugin <= 1.1 - Arbitrary File Upload vulnerability9.9 Critical
- keighl menus plus+WordPress Menus Plus+ Plugin <= 1.9.6 - SQL Injection vulnerability8.5 High
- falcontheme team wp block packWordPress WP Block Pack plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- markcoker wordpress file searchWordPress WordPress File Search Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- e. marten eu dsgvo helperWordPress EU DSGVO Helper Plugin <= 1.0.6.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ghasemy14 wp2appWordPress WP2APP Plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themefarmer ultimate subscribeWordPress Ultimate Subscribe Plugin <=1.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pqina snippyWordPress Snippy Plugin <= 1.4.1 - CSRF to Cross Site Scripting (XSS) vulnerability7.1 High
- buddypress, elbowrobo mass messaging in buddypress +1 moreWordPress Mass Messaging in BuddyPress Plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- david jeffrey contact form 7 round robin lead distributionWordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - SQL Injection vulnerability7.6 High
- notfound wm options import exportWordPress WM Options Import Export plugin <= 1.0.1 - Sensitive Data Exposure vulnerability7.5 High
- niket joshi wpdb to sqlWordPress WPDB to Sql plugin <= 1.2 - Sensitive Data Exposure vulnerability7.5 High
- caspie fast tubeWordPress Fast Tube plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dreamsofmatter content mirrorWordPress Content Mirror plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound pootle buttonWordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- franciscopalacios easy filteringWordPress Easy Filtering plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- milordk jet skinner for buddypressWordPress Jet Skinner for BuddyPress plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- limesquare lime developer loginWordPress Lime Developer Login plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- yonatan reinberg ycyclistaWordPress yCyclista plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- webdeal podčlánková inzerceWordPress Podčlánková inzerce plugin <= 2.4.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound staging cdnWordPress Staging CDN plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kinlane ctygrid hyp3rl0cal searchWordPress CtyGrid Hyp3rL0cal Search plugin <= 0.1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- callum richards admin menu organizerWordPress Admin Menu Organizer plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- eugen bobrowski debug toolWordPress Debug Tool plugin <= 2.2 - Broken Access Control vulnerability4.3 Medium
- notfound macmeWordPress MACME plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bhuvnesh gupta preloader quotesWordPress Preloader Quotes plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jannatqualitybacklinks.com redirection plusWordPress REDIRECTION PLUS plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- flourish pixel fp rss category excluderWordPress FP RSS Category Excluder plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- md imranur rahman localgridWordPress LocalGrid plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound lh emailWordPress LH Email plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- andygauk bit.ly linkerWordPress Bit.ly linker plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- outstrip instant appointmentWordPress Instant Appointment plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound content plannerWordPress Content Planner plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- irshad a.khan cyber sliderWordPress Cyber Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- awcode unique uxWordPress Unique UX plugin <= 0.9.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound wh cache & securityWordPress WH Cache & Security plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound ultimate eventsWordPress Ultimate Events plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- helle1 tagestellerWordPress Tagesteller plugin <= v.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- camoo sarl smsWordPress CAMOO SMS plugin <= 3.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound calendiWordPress Calendi plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- lampd call to action popupWordPress Call To Action Popup plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- maeve lander rezdy reloadedWordPress Rezdy Reloaded plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- mohammadjafar khajeh group category creatorWordPress Group category creator plugin <= 1.3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bastien ho eelv newsletterWordPress EELV Newsletter plugin <= 4.8.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound tab my contentWordPress Tab My Content plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- riosis private limited rio photo galleryWordPress Rio Photo Gallery plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- animexxx dformsWordPress dForms plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…