CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- wassereimer easy code placementWordPress Easy Code Placement Plugin <= 18.11 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tahminajannat url shortener | conversion tracking | ab testing | woocommerceWordPress URL Shortener WooCommerce Plugin <= 9.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound easy filterWordPress Easy Filter Plugin <= 1.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- foxskav easy betWordPress Easy Bet Plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- duogeek email to downloadWordPress Email to Download Plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- murali push notification for post and buddypressWordPress Push Notification for Post and BuddyPress plugin <= 2.11 - Settings Change vulnerability6.5 Medium
- ashamil opsi israel domestic shipmentsWordPress OPSI Israel Domestic Shipments plugin <= 2.8.2 - Broken Access Control vulnerability6.5 Medium
- think201 data dashWordPress Data Dash plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- devbunchuk custom widget creatorWordPress Custom Widget Creator plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound singsys -awesome gallery, singsys -awesome gallery +1 moreWordPress Singsys -Awesome Gallery plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- podamibe nepal twilio private callWordPress Podamibe Twilio Private Call plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tauhidul alam advanced angular contact formWordPress Advanced Angular Contact Form plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound wordpress-to-candidate for salesforce crmWordPress WordPress-to-candidate for Salesforce CRM plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- crystalwebpro contact form 7 – paystack add-onWordPress Contact Form 7 – Paystack Add-on plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nabeel tahir form to online bookingWordPress Form To Online Booking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fabio zuanon add custom content after postWordPress Add custom content after post plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- adamskaat scroll topWordPress Scroll Top plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- razvypp tidy.roWordPress Tidy.ro plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wjharil adsmiddleWordPress AdsMiddle plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ariagle wp-clapWordPress WP-Clap plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- matt brooks library instruction recorderWordPress Library Instruction Recorder plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- craig.edmunds@gmail.com recip.lyWordPress Recip.ly plugin <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- makong internal links generatorWordPress Internal Links Generator plugin <= 3.51 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fredsted wp login attempt logWordPress WP Login Attempt Log plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mark winiarski wplingoWordPress WPLingo plugin <= 1.1.2 - Arbitrary Content Deletion vulnerability6.5 Medium
- kvvaradha kv compose email from dashboardWordPress Kv Compose Email From Dashboard plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hoststreamsell hss embed streaming videoWordPress HSS Embed Streaming Video plugin <= 3.23 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cantonbolo wordpress 淘宝客插件WordPress 淘宝客插件 plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mike martel live dashboardWordPress Live Dashboard plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- khaninejad envato affiliaterWordPress Envato Affiliater plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- arash safari qmean – wordpress did you meanWordPress QMean plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sick ag meac300, meac300-fnade4 +1 morePrivilege Escalation in MEAC3009.9 Critical
- rupeeseed technology ventures rupeewebNo Rate Limiting Vulnerability in RupeeWeb trading platform5.1 Medium
- rupeeseed technology ventures rupeewebInsufficient Authorization Vulnerability in RupeeWeb trading platform7.4 High
- rupeeseed technology ventures rupeewebAuthentication Bypass Vulnerability in RupeeWeb trading platform7.5 High
- bitapps bit assist, bitpressadmin chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist +1 moreBit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter6.5 Medium
- bitapps bit assist, bitpressadmin chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist +1 moreBit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function4.9 Medium
- apache igniteApache Ignite: Possible RCE when deserializing incoming messages by the server node9.5 Critical
- hurrytimer, nlemsieh hurrytimer – an scarcity and urgency countdown timer for wordpress & woocommerce +1 moreHurryTimer <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name6.4 Medium
- tecno com.transsion.carlcareLogic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of...9.8 Critical
golang-github-prometheus-prometheusSUSE,golang-github-prometheus-promuopenSUSE,grafanaopenSUSE +5 more +7 moreSecurity update for SUSE Manager Client ToolsNo score- marketing fire widget optionsWordPress Widget Options Plugin <= 4.1.0 - Arbitrary Code Execution vulnerability9.9 Critical
- themeum qubely, qubely – advanced gutenberg blocks +1 moreQubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID'6.5 Medium
- unknown forminator formsForminator < 1.38.3 - Admin+ Stored XSS4.8 Medium
- tommietott sensly online presenceSensly Online Presence <= 0.6 - Admin+ Stored XSS4.8 Medium
- wpswings return refund and exchange for woocommerceReturn Refund and Exchange For WooCommerce <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference5.4 Medium
- wpswings return refund and exchange for woocommerceReturn Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory5.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreDocker implementation in Brocade SANnav is missing Audit Rules.8.6 High
- dmg mori digital co., ltd. and nxtech co., ltd. cente ipv6, cente ipv6 snmpv2, cente ipv6 snmpv3 +3 more +5 moreOut-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in...5.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav encryption key is logged in the debug logs8.6 High
- Show moreLoading…