CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- creativeitem doctor appointment bookingWordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability8.5 High
- cristopher dino ie css3 supportWordPress IE CSS3 Support Plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gabrielperezs ttt cropWordPress TTT Crop Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nghorta sidebartabsWordPress sidebarTabs Plugin <= 3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- abelony events plannerWordPress Events Planner Plugin <= 1.3.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dyadyalesha dl leadbackWordPress DL Leadback Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- muneeb mobileWordPress Rocket Mobile Plugin <= 0.4.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound viperbarWordPress ViperBar Plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- helloprintWordPress Helloprint Plugin <= 2.0.7 - Arbitrary File Deletion vulnerability7.7 High
- codesolz bitcoin / altcoin payment gateway for woocommerceWordPress Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop plugin <= 1.7.6 - SQL Injection vulnerability9.3 Critical
- helloprintWordPress Helloprint Plugin <= 2.0.7 - Arbitrary File Deletion vulnerability8.6 High
- dotsquaresltd migrate postsWordPress Migrate Posts Plugin <=1.0 - Post Based Cross Site Scripting (XSS) vulnerability7.1 High
- notfound authors autocomplete meta boxWordPress Authors Autocomplete Meta Box plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- richardgabriel staff directory plugin: company directoryWordPress Staff Directory Plugin: Company Directory Plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound meta acceleratorWordPress Meta Accelerator plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kutu62 sports rankings and listsWordPress Sports Rankings and Lists plugin <= 2.3 - Arbitrary File Download vulnerability7.1 High
- notfound wp find your nearestWordPress WP Find Your Nearest Plugin <= 0.3.1 - CSRF to Settings Change vulnerability7.1 High
- antonio sanchez uncomplicated seoWordPress Uncomplicated SEO plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound wp church centerWordPress WP Church Center Plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- stylemix ulistingWordPress uListing plugin <= 2.1.6 - SQL Injection vulnerability9.3 Critical
- notfound wp less compilerWordPress WP Less Compiler plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- kareemsultan social linksWordPress Social Links plugin <= 1.0.11 - Stored Cross-Site Scripting vulnerability6.5 Medium
- newbiesup wp frontend submitWordPress WP Frontend Submit Plugin <= 1.1.0 - Reflected Cross-Site Scripting vulnerability7.1 High
- ravi singh visitor detailsWordPress Visitor Details plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- randyjensen rj quickchartsWordPress RJ Quickcharts plugin <= 0.6.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- notfound delete comments by statusWordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability7.5 High
- notfound callback requestWordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- rohitashv singhal contact us by lord linusWordPress Contact Us By Lord Linus Plugin <= 2.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- devu status updaterWordPress Status Updater Plugin <= 9.21 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hashshop wizshopWordPress WizShop Plugin <= 3.0.2 - Local File Inclusion vulnerability8.1 High
- notfound theme options zWordPress Theme Options Z Plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- alejandro aranda woocommerce oscommerce syncWordPress Woocommerce osCommerce Sync plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability7.1 High
- danish ali malik top bar – popups – by wpoptinWordPress WPOptin plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound like dislike plus counterWordPress Like dislike plus counter plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ehabstar user roleWordPress User Role plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound implied cookie consentWordPress Implied Cookie Consent plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kareemsultan social linksWordPress Social Links plugin <= 1.2 - SQL Injection vulnerability7.6 High
- joomsky wp vehicle managerWordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerability8.1 High
- shalomworld sw plusWordPress SW Plus Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- josh harrison yahoo bossWordPress Yahoo BOSS Plugin <= 0.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- accreteinfosolution appointment buddy widgetWordPress Appointment Buddy Widget By Accrete plugin <= 1.2. - Reflected Cross-Site Scripting vulnerability7.1 High
- gtlwpdev all push notification for wpWordPress All push notification for WP plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- dreamstime stock photosWordPress Dreamstime Stock Photos plugin <= 4.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- appten image rotatorWordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound seekxl snaprWordPress seekXL Snapr plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- antrouss unitimetableWordPress UniTimetable plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dave lavoie ep4 more embedsWordPress EP4 More Embeds Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability7.1 High
- ed atrero album reviewerWordPress Album Reviewer plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- creativemindssolutions cm map locationsWordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- creativemindssolutions cm pop-up bannersWordPress CM Pop-Up Banners plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…