CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- fortinet fortimailA use of a cryptographically weak pseudo-random number generator vulnerability in the...6.9 Medium
- hcl software devops deploy / hcl launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure4.3 Medium
- fortinet fortisandboxA stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox...6.4 Medium
- mattermost, mattermost mobile +1 moreDenial of Service Via Malicious GIF6.5 Medium
- rachel cherry wa11y – the web accessibility toolboxWordPress wA11y – The Web Accessibility Toolbox plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- kornelly translatorWordPress Translator plugin <= 0.3 - CSRF to Stored XSS vulnerability7.1 High
- coderscom wp odoo form integratorWordPress WP Odoo Form Integrator plugin <=1.1.0 - CSRF to Stored XSS vulnerability7.1 High
- speakpipeWordPress SpeakPipe plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- takien rewriteWordPress Rewrite plugin <= 0.2.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- jacob schwartz wp e-commerce style emailWordPress WP e-Commerce Style Email plugin <= 0.6.2 - CSRF to Remote Code Execution vulnerability9.6 Critical
- mandegarweb replace default wordsWordPress Replace Default Words plugin <= 1.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- catchsquare wp social widgetWordPress WP Social Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- saad iqbal appexpertsWordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure Vulnerability5.3 Medium
- anthony wordpress sql backupWordPress SQL Backup plugin <= 3.5.2 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- logan carlile easy page transitionWordPress Easy Page Transition plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ldwin79 sourceplay-navermapWordPress sourceplay-navermap plugin <= 0.0.2 - Broken Access Control vulnerability4.3 Medium
- jiangqie official website mini programWordPress JiangQie Official Website Mini Program plugin <= 1.8.2 - SQL Injection Vulnerability7.6 High
- dejan copylinkWordPress CopyLink plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- alphasis related posts via categoriesWordPress Related Posts via Categories plugin <= 2.1.2 - CSRF to Stored XSS vulnerability7.1 High
- flipdish ordering systemWordPress Flipdish Ordering System plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- thiagogsrwp wp hotjarWordPress WP Hotjar plugin <= 0.0.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wp-maverick wp parallax content sliderWordPress WP Parallax Content Slider plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- link oss uploadWordPress OSS Upload plugin <= 4.8.9 Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- iografica ig shortcodesWordPress IG Shortcodes plugin <= 3.1 Cross Site Scripting (XSS) Vulnerability6.5 Medium
- tstafford include-fileWordPress include-file plugin <= 1 Cross Site Scripting (XSS) Vulnerability6.5 Medium
- notfound include urlWordPress Include URL plugin <= 0.3.5 Cross Site Scripting (XSS) Vulnerability6.5 Medium
- westerndeal advanced dewplayerWordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability5.3 Medium
- tuyennv music press proWordPress Music Press Pro plugin <= 1.4.6 Broken Access Control Vulnerability5.3 Medium
- dourou flickr set slideshowsWordPress Flickr set slideshows plugin <= 0.9 - SQL Injection Vulnerability8.5 High
- ryan xantoo map contactWordPress Map Contact plugin <= 3.0.4 - CSRF to Stored XSS Vulnerability7.1 High
- shawfactor lh ogp metaWordPress LH OGP Meta plugin <= 1.73 - CSRF to Stored XSS Vulnerability7.1 High
- bbodine1 ctabsWordPress cTabs plugin <= 1.3 - CSRF to Stored XSS Vulnerability7.1 High
- marynixie generate post thumbnailsWordPress Generate Post Thumbnails plugin <= 0.8 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- alphaomegaplugins alphaomega captcha & anti-spam filterWordPress AlphaOmega Captcha & Anti-Spam Filter plugin <= 3.3 - CSRF to Stored XSS Vulnerability7.1 High
- proranktracker pro rank trackerWordPress Pro Rank Tracker plugin <= 1.0.0 - CSRF to Stored XSS Vulnerability7.1 High
- pluginops top barWordPress Top Bar plugin <= 3.3 - Broken Access Control Vulnerability5.3 Medium
- hotvanrod adsense privacy policyWordPress AdSense Privacy Policy plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability7.1 High
- mendibass browser address bar colorWordPress Browser Address Bar Color plugin <= 3.3 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability7.1 High
- huangye wudeng hacklog remote image autosaveWordPress Hacklog Remote Image Autosave plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- arefly login redirectWordPress Login Redirect plugin <= - 1.0.5 Cross Site Scripting (XSS) Vulnerability5.9 Medium
- jenst mobile navigationWordPress Mobile Navigation plugin <= - 1.5 Cross Site Scripting (XSS) Vulnerability5.9 Medium
- mrdenny my default post contentWordPress My Default Post Content plugin <= - 0.7.3 Cross Site Scripting (XSS) Vulnerability5.9 Medium
- igor yavych simple ratingWordPress Simple Rating plugin <= 1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- stedb corp. formsWordPress STEdb Forms plugin <= 1.0.4 - SQL Injection Vulnerability7.6 High
- alirezamohammadi دکمه، شبکه اجتماعی خریدWordPress دکمه، شبکه اجتماعی خرید plugin <= 2.0.6 - SQL Injection Vulnerability7.6 High
- jahertor wp featured entriesWordPress WP Featured Entries plugin <= - 1.0 SQL Injection Vulnerability8.5 High
- hitoy super static cacheWordPress Super Static Cache plugin <= 3.3.5 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- aryan themes clinkWordPress Clink plugin <= 1.2.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- karrikas banner-managerWordPress banner-manager plugin <= 16.04.19 - CSRF to Stored XSS vulnerability7.1 High
- wpwox custom script integrationWordPress Custom Script Integration plugin <= - 2.1 Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- Show moreLoading…