CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- netbitsolutions push envoy notificationsWordPress Push Envoy Notifications plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- chenyenming ui slider filter by priceWordPress Ui Slider Filter By Price plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- david cramer userbase access controlWordPress Userbase Access Control plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound textellerWordPress Texteller plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- agora32 maniac seoWordPress Maniac SEO plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound awesome hooksWordPress Awesome Hooks plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound wp contestWordPress WP Contest plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mndpsingh287 track page scrollWordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound swift calendar online appointment schedulingWordPress Swift Calendar Online Appointment Scheduling plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dactum clickbank storefrontWordPress ClickBank Storefront WordPress Plugin plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- goodlayers blocks, notfound goodlayers blocks +1 moreWordPress Goodlayers Blocks plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- securesubmit heartland management terminalWordPress Heartland Management Terminal plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jas saran g web pro store locatorWordPress G Web Pro Store Locator plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mrsaucier googlemapperWordPress GoogleMapper plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound google map on post/pageWordPress Google Map on Post/Page plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- brainvireinfo sale with razorpayWordPress Sale with Razorpay plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tsecher ts-treeWordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability6.5 Medium
- notfound pit login welcomeWordPress Pit Login Welcome plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ned curated searchWordPress Curated Search plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- husani wp fpoWordPress WP FPO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- binnyva quizzinWordPress Quizzin plugin <= 1.01.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- moallemi google transliterationWordPress Google Transliteration plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- michael stursberg browser-update-notifyWordPress Browser-Update-Notify plugin <= 0.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- abolfazl sabagh rng-refreshWordPress rng-refresh plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound easy galleryWordPress Easy Gallery plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- richestsoft rs surveyWordPress RS Survey plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cojecto predict whenWordPress Predict When plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- azurecurve floating featured image, notfound azurecurve floating featured image +1 moreWordPress azurecurve Floating Featured Image plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- anzar ahmed ni woocommerce sales report emailWordPress Ni WooCommerce Sales Report Email plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- micahblu rsvp meWordPress RSVP ME plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- melascriviWordPress melascrivi plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cmsaccount photo video storeWordPress Photo Video Store plugin <= 21.07 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound killer theme optionsWordPress Killer Theme Options plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- flexostudio flexo sliderWordPress Flexo Slider plugin <= 1.0013 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound essay wizard (wpcres)WordPress Essay Wizard (wpCRES) plugin <= 1.0.6.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- magent vampire character managerWordPress Vampire Character Manager plugin <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- keir whitaker twitter news feedWordPress Twitter News Feed plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound awesome twitter feedsWordPress Awesome Twitter Feeds plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- agenwebsite aw woocommerce kode pembayaranWordPress AW WooCommerce Kode Pembayaran plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kundan yevale smooth dynamic sliderWordPress Smooth Dynamic Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kokoende wp spacecontentWordPress WP SpaceContent plugin <= 0.4.5 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- dkukral attach gallery postsWordPress Attach Gallery Posts plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- radicaldesigns radslideWordPress radSLIDE plugin <= 2.1 - Broken Access Control to Stored Cross-Site Scripting vulnerability6.3 Medium
- willshouse tinymce extended configWordPress TinyMCE Extended Config plugin <= 0.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nord tramper ntp-header-imagesWordPress ntp-header-images plugin <=1.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- jnwry vcosWordPress vcOS plugin <=1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- marekki marekkis watermarkWordPress Marekkis Watermark plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- metagauss profilegridWordPress ProfileGrid Plugin <= 5.9.4.3 - PHP Object Injection vulnerability8.8 High
- mayuri k 101news, mayurik best online news portal +1 moreSQL injection vulnerability in 101news9.3 Critical
- mayuri k 101news, mayurik best online news portal +1 moreSQL injection vulnerability in 101news9.3 Critical
- Show moreLoading…