CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- henrique mouta cas maestroWordPress CAS Maestro plugin <= 1.1.3 - CSRF to Stored XSS vulnerability7.1 High
- sana ullah jquery dropdown menuWordPress jQuery Dropdown Menu plugin <= 3.0 - CSRF to Stored XSS vulnerability7.1 High
- enzocostantini55 anac xml renderWordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability7.1 High
- odihost easy 301 redirectsWordPress Easy 301 Redirects plugin <= 1.33 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- flyaga fix rss feedsWordPress Fix Rss Feeds plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- iiiryan wordpres 同步微博WordPress WordPres 同步微博 plugin <= 1.1.0 - CSRF to Stored XSS vulnerability7.1 High
- z.com bygmo gmo font agentWordPress GMO Font Agent plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- donald gilbert wordpress admin bar improvedWordPress WordPress Admin Bar Improved plugin <= 3.3.5 - CSRF to Stored XSS vulnerability7.1 High
- smartredfox pretty file linksWordPress Pretty file links plugin <= 0.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpshop.ru callphone'rWordPress CallPhone'r plugin <= 1.1.1 - CSRF to Stored XSS vulnerability7.1 High
- yummly rich recipesWordPress Yummly Rich Recipes plugin <= 4.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- borov cackleWordPress Cackle plugin <= 4.33 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pixeline issuupressWordPress issuuPress plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- swayam.tejwani menu duplicatorWordPress Menu Duplicator plugin <= 1.0 - Broken Access Control vulnerability4.3 Medium
- wpsolutions soundcloud ultimateWordPress WP SoundCloud Ultimate plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- otwthemes info boxes shortcode and widgetWordPress Info Boxes Shortcode And Widgets plugin <= 1.15 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- avaibookWordPress AvaiBook plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- benedikt mo bmo expoWordPress BMo Expo plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- chrishurst simple optimizerWordPress Simple Optimizer plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- cristian sarov upload quota per userWordPress Upload Quota per User plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- zeitwesentech beautiful link previewWordPress Beautiful Link Preview plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- muro external image replaceWordPress External image replace plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- captcha.soft image captchaWordPress Image Captcha plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- gopiplus message tickerWordPress Message ticker plugin <= 9.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- morganf weather layerWordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- gbs developer wp ride bookingWordPress WP Ride Booking plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- atikul ai preloaderWordPress AI Preloader plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- sébastien dumont auto load next postWordPress Auto Load Next Post plugin <= 1.5.14 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wpshopee awesome logosWordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability9.3 Critical
- codetoolbox my bootstrap menuWordPress My Bootstrap Menu plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability5.9 Medium
- lucksy typekit plugin for wordpressWordPress Typekit plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- profitshare.ro wp profitshareWordPress WP Profitshare plugin <= 1.4.9 - SQL Injection vulnerability7.6 High
- marcel-nl super simple subscriptionsWordPress Super Simple Subscriptions plugin <= 1.1.0 - SQL Injection vulnerability7.6 High
- damian orzol contact form 7 material designWordPress Contact Form 7 Material Design plugin <= 1.0.0 - CSRF to Stored XSS vulnerability7.1 High
- giangmd93 gp back to topWordPress GP Back To Top plugin <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- simple sa simple.erpPrivilege Escalation in SIMPLE.ERP7.7 High
- simple sa simple.erpProtocol Downgrade in SIMPLE.ERP8.3 High
- imagination technologies graphics ddkGPU DDK - _WrapExtMemReleasePages called twice if _FlushUMVirtualRange fails7.8 High
- imagination technologies graphics ddkGPU DDK - PMMETA_PROTECT PMR can be exported as dma-buf file / GEM object7.8 High
- softwin wmx3Softwin WMX3 ImageAdd.ashx ImageAdd unrestricted upload5.3 Medium
- amtt hotel broadband operation system, amttgroup hibos +1 moreAMTT Hotel Broadband Operation System port_setup.php popen os command injection5.3 Medium
- michelson dante editor, dante-editor dante3 +1 moremichelson Dante Editor Insert Link cross site scripting5.1 Medium
- getme contenttoolsGetmeUK ContentTools Image cross site scripting5.1 Medium
- yiiframework yii, yiisoft yii2 +1 moreyiisoft Yii2 MockClass.php generate deserialization5.3 Medium
- yiiframework yii, yiisoft yii2 +1 moreyiisoft Yii2 SortableIterator.php getIterator deserialization5.3 Medium
- totolink a3000ru, a3000ru firmware +1 moreTOTOLINK A3000RU Syslog Configuration File ExportSyslog.sh access control5.3 Medium
- phpgurukul elearning systemPHPGurukul eLearning System Image index.php unrestricted upload5.3 Medium
- unknown slider, gallery, and carousel by metaslider, metaslider slider\, gallery\, and carousel +1 moreSlider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS3.5 Low
- unknown slider, gallery, and carousel by metaslider, metaslider slider\, gallery\, and carousel +1 moreSlider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS3.5 Low
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.8.33 - Admin+ Stored XSS3.5 Low
- Show moreLoading…