CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- ali2woo alinextWordPress AliNext plugin <= 3.5.1 - Open Redirection vulnerability4.7 Medium
- pressmaximum currency switcher for woocommerceWordPress Currency Switcher for WooCommerce plugin <= 0.0.7 - CSRF to Stored XSS vulnerability7.1 High
- theme funda custom field for wp job managerWordPress Custom Field For WP Job Manager plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- vollstart serial codes generator and validator with woocommerce supportWordPress Serial Codes Generator and Validator with WooCommerce Support plugin <= 2.7.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tickeraWordPress Tickera plugin <= 3.5.5.2 - Broken Access Control vulnerability4.3 Medium
- sfaerber dr. flexWordPress Dr. Flex plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ashley novelistWordPress Novelist plugin <= 1.2.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- jetmonsters restaurant menu by motopressWordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerability8.8 High
- webangon the pack elementor addonsWordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability7.5 High
- setriosoft bizcalendar-webWordPress bizcalendar-web plugin <= 1.1.0.34 - SQL Injection vulnerability7.6 High
- pixolette christmas pandaWordPress Christmas Panda plugin <= 1.0.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- magepeople inc. taxi booking manager for woocommerceWordPress Taxi Booking Manager for WooCommerce plugin <= 1.2.1 - Broken Access Control vulnerability5.3 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- latepointWordPress LatePoint plugin <= 5.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- soft8soft llc verge3dWordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- themifyme themify event postWordPress Themify Event Post Plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themifyme themify event postWordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability7.5 High
- hossni mubarak cool author boxWordPress Cool Author Box plugin <= 2.9.9 - Broken Access Control vulnerability5.3 Medium
- arraytics wpcafeWordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability7.5 High
- arraytics timeticsWordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerability5.3 Medium
- pierre lannoy ip locatorWordPress IP Locator plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- israpil textmetricsWordPress Textmetrics plugin <= 3.6.1 - Broken Access Control vulnerability5.4 Medium
- boone gorges anthologizeWordPress Anthologize Plugin <= 0.8.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- hakik zaman custom login logoWordPress Custom Login Logo Plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- otacke snordian's h5pxapikatchuWordPress SNORDIAN's H5PxAPIkatchu plugin <= 0.4.14 - Broken Access Control vulnerability5.3 Medium
- ht plugins wishsuiteWordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability7.5 High
- igor benic simple giveawaysWordPress Simple Giveaways plugin <= 2.48.1 - SQL Injection vulnerability8.5 High
- mlaza jalbum bridgeWordPress jAlbum Bridge plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpzita z companionWordPress Z Companion plugin <= 1.0.13 - Broken Access Control vulnerability5.4 Medium
- nks publish post email notificationWordPress publish post email notification plugin <= 1.0.2.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- saeed sattar beglou hesabfa accountingWordPress Hesabfa Accounting plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- radiustheme the post gridWordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability7.5 High
- listamesterWordPress Listamester plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sonalsinha21 skt addons for elementorWordPress SKT Addons for Elementor plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- javier revilla validatecertifyWordPress ValidateCertify plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- smackcoders lead form data collection to crmWordPress Lead Form Data Collection to CRM plugin <= 3.0.1 - SQL Injection vulnerability8.5 High
- shahjada live formsWordPress WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms plugin <= 4.8.4 - Settings Change vulnerability5.4 Medium
- constantin boiangiu vimeothequeWordPress Vimeotheque plugin <= 2.3.4.2 - SQL Injection vulnerability8.5 High
- wpdesk flexible cookiesWordPress Flexible Cookies plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- maennchen1.de wpshopgermany it-recht kanzleiWordPress wpShopGermany IT-RECHT KANZLEI plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- greg ross just writing statisticsWordPress Just Writing Statistics plugin <= 5.3 - Broken Access Control vulnerability4.3 Medium
- abu bakar twb woocommerce reviewsWordPress TWB Woocommerce Reviews plugin <= 1.7.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- atawai gum elementor addonWordPress Gum Elementor Addon plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pagup wp google street viewWordPress WP Google Street View plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- aman funnelkit automationsWordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability4.7 Medium
- ufukart comment approved notifier extendedWordPress Comment Approved Notifier Extended plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpdever cart tracking for woocommerceWordPress Cart tracking for WooCommerce plugin <= 1.0.16 - SQL Injection Vulnerability7.6 High
- alexvtn chatbox managerWordPress Chatbox Manager plugin <= 1.2.2 - Broken Access Control Vulnerability5.3 Medium
- clearoutio clearout email validatorWordPress Clearout Email Validator plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- eli ez sql reports shortcode widget and db backupWordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.25.08 - CSRF to SQL Injection vulnerability8.2 High
- Show moreLoading…