CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- forge12 interactive gmbh f12-profilerWordPress F12-Profiler Plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- will anderson minimum password strengthWordPress Minimum Password Strength Plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- alex prokopenko / justcoded just variablesWordPress Just Variables Plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- free plug in by seo roma auto tag linksWordPress Auto Tag Links Plugin <= 1.0.13 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- gmnazmul smart maintenance & countdownWordPress Smart Maintenance & Countdown Plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- sébastien dumont woocommerce display products by tagsWordPress WooCommerce Display Products by Tags plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- playerjsWordPress PlayerJS plugin <= 2.23 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- inlinkz ez inlinkz linkupWordPress EZ InLinkz linkup plugin <= 0.18 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- queeez wp-postratings cheaterWordPress WP-PostRatings Cheater Plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- winlin live streaming video player – by srs playerWordPress Live Streaming Video Player – by SRS Player plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bplugins animated text blockWordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerability6.5 Medium
- bruce video.js hls playerWordPress Video.js HLS Player plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jon bishop wp about authorWordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- blighty blightly explorerWordPress Blightly Explorer plugin <= 2.3.0 - CSRF to Stored XSS vulnerability7.1 High
- pankaj mondal profile widget ninjaWordPress Profile Widget Ninja plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ixiter simple google sitemapWordPress Simple Google Sitemap Plugin <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- it-rays rays gridWordPress RAYS Grid Plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- hosting.io jpg, png compression and optimizationWordPress JPG, PNG Compression and Optimization Plugin <= 1.7.35 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wptom all-in-one cufonWordPress All-In-One Cufon Plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- boot div wp sitemapWordPress WP Sitemap plugin <= 1.0 - SQL Injection vulnerability8.5 High
- luk3thomas bulk content creatorWordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- oooorgle quotes llamaWordPress Quotes llama plugin <= 3.0.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- pathomationWordPress Pathomation plugin <= 2.5.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- achal jain table of contents blockWordPress Table of Contents Block plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themelogger contact form 7 star rating with font awesomeWordPress Contact Form 7 Star Rating with font Awesome plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- themelogger contact form 7 star ratingWordPress Contact Form 7 Star Rating plugin <= 1.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- nazmul hasan robin nhr options table managerWordPress NHR Options Table Manager Plugin <= 1.1.2 - Deserialization of untrusted data vulnerability7.2 High
- giuliopanda adfoWordPress ADFO plugin <= 1.9.1 - Deserialization of untrusted data vulnerability7.2 High
- cmstactics wp video postsWordPress WP Video Posts plugin <= 3.5.1 - CSRF to Remote Code Execution (RCE) vulnerability8.3 High
- guelben bravo search & replaceWordPress Bravo Search & Replace Plugin <= 1.0 - SQL Injection vulnerability7.6 High
- revenueflex auto ad inserter – increase google adsense and ad manager revenueWordPress Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue Plugin <= 1.5 - Settings Change vulnerability7.2 High
- platcom wp-asambleasWordPress WP-Asambleas plugin <= 2.85.0 - Arbitrary Shortcode Execution vulnerability4.8 Medium
- seyyed-amir erima zarinpal donateWordPress Select Erima Zarinpal Donate Plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- alobaidi archive pageWordPress Archive Page plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tiefpunkt add linked images to galleryWordPress Add Linked Images To Gallery plugin <= 1.4 - CSRF to Stored XSS vulnerability7.1 High
- lizeipe photo gallery ( responsive )WordPress Photo Gallery ( Responsive ) plugin <= 4.0 - CSRF to Privilege Escalation vulnerability8.8 High
- vinagecko vg postcarouselWordPress VG PostCarousel plugin <= 1.1 - Local File Inclusion vulnerability7.5 High
- ignacio perez hover image buttonWordPress Hover Image Button plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aaron d. campbell google maps for wordpressWordPress Google Maps for WordPress plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- agito computer health4allSQLi in Agito Computer's Health4All8.8 High
- agito computer health4allImproper Access Control in Agito Computer's Health4All8.3 High
- agito computer life4allSQLi in Agito Computer's Life4All8.8 High
- tekrom technology t-soft e-commerceXSS in Tekrom Technology's T-Soft E-Commerce4.7 Medium
- gliffy onlineBroken Authentication in Gliffy5.3 Medium
- libarchivelibarchive bsdunzip.c list null pointer dereference4.8 Medium
openh264-sys2crates.ioOpenH264 Rust API Openh264 Decoding Functions Heap Overflow Vulnerability8.6 High- wpo365 microsoft 365 graph mailer, | microsoft 365 graph mailer +1 moreWPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' Parameter4.7 Medium
- linux, linux kernel +1 moreio_uring/rw: split io_read() into a helper7.8 High
- mattermost, mattermost server +1 moreArbitrary file read via block duplication in Mattermost Boards9.9 Critical
- mattermost, mattermost server +1 moreSQL Injection in Mattermost Boards via board category ID reordering9.6 Critical
- Show moreLoading…