CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- philippe no disposable emailWordPress No Disposable Email plugin <= 2.5.1 - CSRF to Stored XSS vulnerability7.1 High
- terence d. go to topWordPress Go To Top plugin <= 0.0.8 - CSRF to Stored XSS vulnerability7.1 High
- jogesh responsive google mapWordPress Responsive Google Map plugin <= 3.1.5 - Broken Access Control vulnerability5.3 Medium
- shellbot easy image displayWordPress Easy Image Display plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- a. jones featured image thumbnail gridWordPress Featured Image Thumbnail Grid plugin <= 6.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- theme egg themeegg toolkitWordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability9.1 Critical
- ajay sharma wordpress login form to anywhereWordPress wordpress login form to anywhere plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- aftab ali muni wp add active class to menu itemWordPress WP Add Active Class To Menu Item plugin <=1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- muntasir rahman custom dashboard pageWordPress Custom Dashboard Page plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ravinder khurana wp hide admin barWordPress WP Hide Admin Bar plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- edwardw wp no-bot questionWordPress WP No-Bot Question plugin <= 0.1.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pipdig pipdisqusWordPress pipDisqus plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- rahul arora wp last modifiedWordPress WP Last Modified plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- thiago s.f. skitter slideshowWordPress Skitter Slideshow plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- chaser324 featured posts gridWordPress Featured Posts Grid plugin <= 1.7 - CSRF to Stored XSS vulnerability7.1 High
- benjamin pick contact form 7 select box editor buttonWordPress Contact Form 7 Select Box Editor Button plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- naren members page only for logged in usersWordPress Members page only for logged in users plugin <= 1.4.2 - CSRF to Stored XSS vulnerability7.1 High
- webgarb tabgarb proWordPress TabGarb Pro plugin <= 2.6 - CSRF to Stored XSS vulnerability7.1 High
- steveorevo domain themeWordPress Domain Theme plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- akshar soft solutions as english adminWordPress AS English Admin plugin <= 1.0.0 - Open Redirection vulnerability4.7 Medium
- suman biswas custom top barWordPress Custom top bar plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- frucomerci list of posts from each category plugin for wordpressWordPress List of Posts from each Category plugin for WordPress plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1 High
- a2rocklobster ftp syncWordPress FTP Sync plugin <= 1.1.6 - CSRF to Stored XSS vulnerability7.1 High
- jazzigor price-calcWordPress price-calc plugin <= 0.6.3 - CSRF to Stored XSS vulnerability7.1 High
- fastmover plugins last updated columnWordPress Plugins Last Updated Column plugin <= 0.1.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- xjb rest api to miniprogramWordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rajesh kumar wp bulk post duplicatorWordPress WP Bulk Post Duplicator plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- martin wp compare tablesWordPress WP Compare Tables plugin <= 1.0.5 - CSRF to Stored XSS vulnerability7.1 High
- mg12 mobile themesWordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- aumsrini bee layer sliderWordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- will brubaker awesome surveysWordPress Awesome Surveys plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- skrill, skrill team official +1 moreWordPress Skrill Official plugin <= 1.0.66 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- shanebp bp email assign templatesWordPress BP Email Assign Templates By shanebp plugin <= 1.6 - Cross-Site Scripting vulnerability5.9 Medium
- shanebp bp email assign templatesWordPress BP Email Assign Templates By shanebp plugin <= 1.7 - Arbitrary Content Deletion vulnerability6.5 Medium
- jwpegram block spam by math reloadedWordPress Block Spam By Math Reloaded plugin <= 2.2.4 - Broken Access Control vulnerability5.3 Medium
- jwpegram block spam by math reloadedWordPress Block Spam By Math Reloaded plugin <= 2.2.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- amocrm, amocrm webform +1 moreWordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- stesvis frontpage category filterWordPress Frontpage category filter plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- smerriman login loggerWordPress Login Logger plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- planet studio builder for contact form 7 by webconstruct, planetstudio builder for contact form 7 +1 moreWordPress Builder for Contact Form 7 by Webconstruct plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- carlos minatti delete original imageWordPress Delete Original Image plugin <= 0.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- venugopal comment date and gravatar removerWordPress Comment Date and Gravatar remover plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- bhzad wp jquery persian datepickerWordPress WP jQuery Persian Datepicker plugin <= 0.1.0 - CSRF to Stored XSS vulnerability7.1 High
- ppdpurveyor google news editors picks feed generatorWordPress Google News Editors Picks Feed Generator plugin <= 2.1 - CSRF to Stored XSS vulnerability7.1 High
- codevibrant maintenance noticeWordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rankchecker, rankchecker rankchecker.io integration +1 moreWordPress Rankchecker.io Integration plugin <= 1.0.9 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- dangrossman w3counter free real-time web stats, w3counter +1 moreWordPress W3Counter Free Real-Time Web Stats plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- ashlar cobaltAshlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- Show moreLoading…