CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- stylemix ulistingWordPress uListing Plugin <= 2.1.6 - SQL Injection vulnerability8.5 High
- theasysWordPress Theasys plugin <= 1.0.1 - CSRF to Stored XSS vulnerability7.1 High
- danillo nunes login-boxWordPress Login-box plugin <= 2.0.4 - CSRF to Stored XSS vulnerability7.1 High
- ibasit globalquranWordPress GlobalQuran Plugin <= 1.0 - CSRF to Settings Change vulnerability4.3 Medium
- zankover fami sales popupWordPress Fami Sales Popup plugin <= 2.0.0 - Local File Inclusion vulnerability7.5 High
- phillip.gooch auto seoWordPress Auto SEO plugin <= 2.5.6 - CSRF to Stored XSS vulnerability7.1 High
- on page seo + whatsapp chat button page seo + whatsapp chat button, rishi on page seo + whatsapp chat button +1 moreWordPress On Page SEO + Social Live Chat (Formerly OPS) plugin <= 2.0.0 - CSRF to Stored XSS vulnerability7.1 High
- victor barkalov custom links on admin dashboard toolbarWordPress Custom Links On Admin Dashboard Toolbar plugin <= 3.3 - CSRF to Stored XSS vulnerability7.1 High
- elbowrobo read more copy linkWordPress Read More Copy Link plugin <= 1.0.2 - CSRF to Stored XSS vulnerability7.1 High
- scriptonite simple user profileWordPress Simple User Profile plugin <= 1.9 - CSRF to Stored XSS vulnerability7.1 High
- jordan.hatch infusionsoft analyticsWordPress Infusionsoft Analytics Plugin <= 2.0 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- cynob it consultancy wp custom post rss feedWordPress WP Custom Post RSS Feed plugin <= 1.0.0 - CSRF to Stored XSS vulnerability7.1 High
- shujahat21 optimate adsWordPress Optimate Ads plugin <= 1.0.3 - Cross-Site Scripting (XSS) vulnerability6.5 Medium
- saleandro songkick concerts and festivalsWordPress Songkick Concerts and Festivals plugin <= 0.9.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- zmseoWordPress ZMSEO plugin <= 1.14.1 - CSRF to Stored XSS vulnerability7.1 High
- orlandolac facilita form trackerWordPress Facilita Form Tracker plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- cyrilg fyrebox quizzesWordPress Fyrebox Quizzes plugin <= 3.1 - CSRF to Stored XSS vulnerability7.1 High
- xdark easy related postsWordPress Easy Related Posts plugin <= 2.0.2 - CSRF to Stored XSS vulnerability7.1 High
- alex polonski smart countdown fxWordPress Smart Countdown FX plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sudipto link to url / postWordPress Link to URL / Post plugin <=1.3 - SQL Injection vulnerability7.6 High
- melodic media slide bannersWordPress Slide Banners plugin <= 1.3 - Broken Access Control vulnerability4.3 Medium
- coffeestudios pop upWordPress Pop Up Plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bnielsen indeed apiWordPress Indeed API Plugin <= 0.5 - CSRF to Settings Change vulnerability4.3 Medium
- metricthemes munk sitesWordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability9.6 Critical
- sainwp onestore sitesWordPress OneStore Sites plugin <= 0.1.1 - CSRF to Arbitrary Plugin Installation vulnerability9.6 Critical
- fancywp starter templates by fancywpWordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability9.6 Critical
- kwiliarty external video for everybodyWordPress External "Video for Everybody" plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- blackus3r wp keyword monitorWordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability7.1 High
- metagauss event kikfyreWordPress Event Kikfyre plugin <= 2.1.8 - Broken Access Control vulnerability5.4 Medium
- wp spell check spell checkWordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- deannas embed rssWordPress Embed RSS plugin <= 3.1 - Arbitrary Shortcode Execution vulnerability4.8 Medium
- mraliende url-preview-boxWordPress URL-Preview-Box plugin <= 1.20 - CSRF to Stored XSS vulnerability7.1 High
- reverbnationdev reverbnation widgetsWordPress ReverbNation Widgets plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability<6.5 Medium
- paulswarthout child themes helperWordPress Child Themes Helper plugin <= 2.2.7 - CSRF to Arbitrary File Deletion vulnerability6.1 Medium
- titusbicknell rss in pageWordPress RSS in Page plugin <= 2.9.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- matt mcbrien wp simpleweatherWordPress WP SimpleWeather plugin <= 0.2.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- topplugins vignette adsWordPress Vignette Ads plugin <= 0.2 - CSRF to Stored XSS vulnerability7.1 High
- amitythemes.com breaking news tickerWordPress Breaking News Ticker plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gubbigubbi kona gallery blockWordPress Kona Gallery Block plugin <= 1.7 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- dugbug easy chart builder for wordpressWordPress Easy Chart Builder for WordPress plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- andrew norcross google earth embedWordPress Google Earth Embed plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- venugopal show notice or message on admin areaWordPress Show notice or message on admin area plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1 High
- garrett grimm simple select all text boxWordPress Simple Select All Text Box plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nirmal kumar ram wp social streamWordPress WP Social Stream plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- zack katz links in captionsWordPress Links in Captions plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- max chirkov flexidx home searchWordPress flexIDX Home Search plugin <= 2.1.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- vasilis triantafyllou easy wp tilesWordPress Easy WP Tiles plugin <= 1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- thunderbax wp admin custom pageWordPress WP Admin Custom Page plugin <= 1.5.0 - CSRF to Stored XSS vulnerability7.1 High
- zackdesign nextgen cooliris galleryWordPress NextGen Cooliris Gallery plugin <= 0.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicholaswilson graceful email obfuscationWordPress Graceful Email Obfuscation plugin <= 0.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…