CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- stylemixthemes pearl - corporate businessWordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability8.1 High
- designingmedia hostikoWordPress Hostiko Theme < 30.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- designingmedia hostikoWordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability7.5 High
- origincode product catalogWordPress Product Catalog plugin <= 1.0.4 - SQL Injection vulnerability9.3 Critical
- trust payments gateway for woocommerceWordPress Trust Payments Gateway for WooCommerce plugin <= 1.1.4 - SQL Injection vulnerability9.3 Critical
- eurocizia wp google calendar managerWordPress WP Google Calendar Manager plugin <= 2.1 - SQL Injection vulnerability8.5 High
- puzich fancybox plusWordPress Fancybox Plus plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- chaozh simple post seriesWordPress Simple Post Series plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sureshdsk are you robot google recaptcha for wordpressWordPress Are you robot google recaptcha for Wordpress plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound zenphotopressWordPress ZenphotoPress plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- homejunction spatialmatch idxWordPress SpatialMatch IDX plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- crazyloong custom smiliesWordPress Custom Smilies plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound docproWordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability9.8 Critical
- gravity2pdf gravity 2 pdfWordPress Gravity 2 PDF plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hectorgarrofe driving directionsWordPress Driving Directions plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound wp event ticketingWordPress WP Event Ticketing plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpexperts.io wp multistore locatorWordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability9.3 Critical
- govind visual text editorWordPress Visual Text Editor plugin <= 1.2.1 - Remote Code Execution (RCE) vulnerability9.9 Critical
- notfound lightview plusWordPress Lightview Plus plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound custom product stickers for woocommerceWordPress Custom Product Stickers for Woocommerce plugin <= 1.9.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fiverraffiliates fiverr.com official search boxWordPress Fiverr.com Official Search Box plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- omnify, inc. omnifyWordPress Omnify plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jotis blue captchaWordPress Blue Captcha plugin <= 1.7.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- m.tiggelaar key4ce osticket bridgeWordPress Key4ce osTicket Bridge plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound shuffleWordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability8.5 High
- notfound nextgen gallery votingWordPress NextGEN Gallery Voting plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- lionelroux wp colorful tag cloudWordPress WP Colorful Tag Cloud plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- arrow plugins mapsWordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gravitational teleportWordPress Teleport plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- srcoley random quotesWordPress Random Quotes Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound tbtestimonialsWordPress TBTestimonials Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- videowhisper video share vodWordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability7.1 High
- picture-gallery picture galleryWordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability7.1 High
- videowhisper micropaymentsWordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability7.1 High
- takumin wp simple slideshowWordPress WP Simple Slideshow Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kyle maurer display post metaWordPress Display Post Meta plugin <= 1.5- Cross Site Scripting (XSS) vulnerability7.1 High
- jamrizzi technologies rizzi guestbookWordPress Rizzi Guestbook plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- frank in stock mailer for woocommerceWordPress In Stock Mailer for WooCommerce Plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kagla gnupressWordPress GNUPress Plugin <= 0.2.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kagla gnucommerceWordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kkwangen wp contact form iiiWordPress WP Contact Form III Plugin <= 1.6.2d - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- chris taylor secure invitesWordPress Secure Invites plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability6.5 Medium
- notfound cookies proWordPress Cookies Pro plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- max k utm tags tracking for contact form 7WordPressUTM tags + Landing page plugin <= 1.4 - CSRF to Stored XSS vulnerability7.1 High
- dang ngoc binh zalo live chatWordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- codesolz bitcoin / altcoin payment gateway for woocommerceWordPress Bitcoin / AltCoin Payment Gateway for WooCommerce plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound gdpr toolsWordPress GDPR Tools plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yendif player another events calendarWordPress Another Events Calendar Plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound theme demo barWordPress Theme Demo Bar Plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- michele giorgi formalityWordPress Formality Plugin <= 1.5.7 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…