CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- notfound wp easy post mailerWordPress WP Easy Post Mailer Plugin <= 0.64 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound popliupWordPress Popliup Plugin <= 1.1.1 - Local File Inclusion vulnerability7.5 High
- notfound rebrand fluent formsWordPress Rebrand Fluent Forms Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound local shipping labels for woocommerceWordPress Local Shipping Labels for WooCommerce Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound stray random quotesWordPress Stray Random Quotes Plugin <= 1.9.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- littlejon lj custom menu linksWordPress LJ Custom Menu Links Plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pillardev easy automatic newsletter liteWordPress Easy Automatic Newsletter Lite Plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound first comment redirectWordPress First Comment Redirect plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mojowill mojo under constructionWordPress Mojo Under Construction Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound site launcherWordPress Site Launcher Plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wphrmanager wp-hr manager: the human resources plugin for wordpressWordPress WP-HR Manager plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- codingkart woo update variations in cartWordPress Woo Update Variations In Cart plugin <= 0.0.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crudlab like box, notfound crudlab like box +1 moreWordPress CRUDLab Like Box Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound guten free optionsWordPress Guten Free Options Plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- alex volkov wah formsWordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability6.5 Medium
- justin sternberg dsgnwrks twitter importerWordPress DsgnWrks Twitter Importer plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- digireturn dn sitemap controlWordPress DN Sitemap Control plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- florian chaillou notifications centerWordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound easy school registrationWordPress Easy School Registration plugin <= 3.9.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jtibbles wp ultimate reviews freeWordPress WP Ultimate Reviews FREE plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound ps ads proWordPress Ps Ads Pro plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound form to jsonWordPress Form To JSON plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- infosoftplugin tax report for woocommerceWordPress Tax Report for WooCommerce plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound comparepressWordPress ComparePress plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cloudvn mobigateWordPress Mobigate plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mancx askme widget, notfound mancx askme widget +1 moreWordPress Mancx AskMe Widget plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jkmas login watchdogWordPress Login Watchdog plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- editionskezzal cobwebo url pluginWordPress Cobwebo URL Plugin plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- montashov 4 author cheer up donateWordPress 4 author cheer up donate plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mauricio urrego chatgpt open ai images & content for woocommerceWordPress ChatGPT Open AI Images & Content for WooCommerce plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- adrian vaquez contextoWordPress Contexto plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fxy060608 新淘客wordpress插件WordPress 新淘客WordPress插件 plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mobde3net epermissionsWordPress ePermissions plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- catch themes duplicate switcher, notfound catch duplicate switcher +1 moreWordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound canalplanWordPress Canalplan plugin <= 5.31 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gtekelis interactive page hierarchyWordPress Interactive Page Hierarchy plugin <= 1.0.1 - Broken Access Control vulnerability6.5 Medium
- mediabeta wp journalWordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability6.5 Medium
- pinal.shah send to a friend addonWordPress Send to a Friend Addon plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- brainpulse page health-o-meterWordPress Page Health-O-Meter plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ashek al mahmud all-in-one-box-loginWordPress all-in-one-box-login plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mal73049 wp post category notificationsWordPress WP Post Category Notifications plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cantonbolo goo.gl url shorterWordPress Goo.gl Url Shorter plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- arsh91 pin locations on mapWordPress Pin Locations on Map plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- digitalzoomstudio dzs ajaxer liteWordPress DZS Ajaxer Lite plugin <= 1.04 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cfuze wp intro.jsWordPress WP Intro.JS Plugin plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- devrix dx sales crmWordPress DX Sales CRM plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mitchell bundy wp social linksWordPress WP Social Links plugin <= 0.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- chris taylor wibstatsWordPress Wibstats plugin <= 0.5.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mohsenshahbazi wp fixtagWordPress WP FixTag plugin <= v2.0.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- mbyte explore pagesWordPress Explore pages plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…