CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcm8550 firmware +16 more +18 moreUse After Free in Computer Vision6.6 Medium
- qualcomm ar8035 firmware, fastconnect 7800 firmware, qca6584au firmware +38 more +40 moreBuffer Over-read in Multi Mode Call Processor7.5 High
github.com/cometbft/cometbftGoCometBFT allows a malicious peer to stall the network by disseminating seemingly valid block partsNo scorersyncSUSESecurity update for rsyncNo scoretshockNuGetTShock allows chat while not fully connected, possible ban evasion6.9 Medium- cometbftMalicious peer can make node stuck in blocksync in github.com/cometbft/cometbft7.1 High
- adamghill django-unicornDjango-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass9.3 Critical
- phpoffice phpspreadsheetBypass XSS sanitizer using the javascript protocol and special characters in phpoffice/phpspreadsheet4.8 Medium
- magepeople inc. taxi booking manager for woocommerceWordPress Taxi Booking Manager for WooCommerce plugin <= 1.1.8 - PHP Object Injection vulnerability8.8 High
- brainvireinfo dynamic url seoWordPress Dynamic URL SEO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- idiatech catalog importer, scraper & crawlerWordPress Catalog Importer, Scraper & Crawler Plugin <= 5.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- abinav thakuri wordpress signatureWordPress Signature plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- manuelvicedo forge – front-end page builderWordPress Forge – Front-End Page Builder plugin <= 1.4.6 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- notfound traveler layout essential for elementorWordPress Traveler Layout Essential For Elementor plugin < 1.4 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- nirwp team nirweb supportWordPress Nirweb support plugin <= 3.0.3 - Broken Access Control vulnerability4.3 Medium
- dotstore hide shipping method for woocommerceWordPress Hide Shipping Method For WooCommerce plugin <= 1.5.1 - Broken Access Control vulnerability4.3 Medium
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerability7.6 High
- wp travel travelWordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability7.6 High
- digitimber cpanel integrationWordPress DigiTimber cPanel Integration plugin <= 1.4.6 - CSRF to Stored XSS vulnerability7.1 High
- ederson peka unlimited page sidebarsWordPress Unlimited Page Sidebars plugin <= 0.2.6 - CSRF to Stored XSS vulnerability7.1 High
- gsheetconnector cf7 google sheets connectorWordPress CF7 Google Sheets Connector plugin <= 5.0.17 - Broken Access Control vulnerability5.3 Medium
- chegevara tags to keywordsWordPress Tags to Keywords plugin <= 1.0.1 - CSRF to Stored XSS vulnerability7.1 High
- hakan ozevin wp base bookingWordPress WP BASE Booking plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- wpdeveloper notificationxWordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- saeed sattar beglou hesabfa accountingWordPress Hesabfa Accounting Plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- xfinity soft content clonerWordPress Content Cloner plugin <= 1.0.1 - Broken Access Control vulnerability4.3 Medium
- pickplugins job board managerWordPress Job Board Manager Plugin <= 2.1.61 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- uiux lab uix shortcodesWordPress Uix Shortcodes plugin <= 2.0.3 - Arbitrary Shortcode Execution vulnerability4.8 Medium
- felipe peixoto powerful auto chatWordPress Powerful Auto Chat plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- marcus (aka @msykes) meta tag managerWordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability4.3 Medium
- averta shortcodes and extra features for phlox themeWordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability4.3 Medium
- notfound admin and site enhancements (ase) proWordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerability7.5 High
- gt3 themes photo galleryWordPress Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery plugin <= 2.7.7.24 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- realwebcare image gallery – responsive photo galleryWordPress Image Gallery – Responsive Photo Gallery plugin <= 1.0.5 - Broken Access Control vulnerability6.5 Medium
- ederson peka media downloaderWordPress Media Downloader Plugin <= 0.4.7.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- metatagg inc custom wp store locatorWordPress Custom WP Store Locator plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- wp.insider simple membership custom messagesWordPress Simple Membership Custom Messages Plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- realtyna provisioningWordPress Realtyna Provisioning Plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- icopydoc xml for avitoWordPress XML for Avito Plugin <= 2.5.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- amentotech private limited wpguppyWordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerability6.5 Medium
- theme funda setup default featured imageWordPress Setup Default Featured Image plugin <= 1.2 - Broken Access Control vulnerability6.5 Medium
- greys korea for woocommerceWordPress Korea for WooCommerce plugin <= 1.1.11 - Sensitive Data Exposure vulnerability6.5 Medium
- shanebp bp email assign templatesWordPress BP Email Assign Templates Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mantrabrain sikshya lmsWordPress Sikshya LMS Plugin <= 0.0.21 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpgear import excel to gravity formsWordPress Import Excel to Gravity Forms Plugin <= 1.18 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hkharpreetkumar1 aio shortcodesWordPress AIO Shortcodes plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability7.1 High
- realmag777 wolf, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability7.5 High
- fatcatapps landing page catWordPress Landing Page Cat plugin <= 1.7.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pepro dev. group peprodev woocommerce receipt uploaderWordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- redefiningtheweb pdf generator addon for elementor page builderWordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerability7.5 High
- Show moreLoading…