CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
scannercrates.ioscanner has a Public API without sufficient bounds checking2.7 Lowarray-init-cursorcrates.ioarray-init-cursor is unsound when used with types that implement `Drop`2.9 Lowredox_uefi_stdcrates.ioRedox UEFI Safe API can cause heap-buffer-overflowNo score- jetbrains teamcityIn JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles...2.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log4.3 Medium
- webangon the pack elementor addonsWordPress The Pack Elementor addons plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- powerfulwp gift message for woocommerceWordPress Gift Message for WooCommerce plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- simplebooklet pdf viewer and embedderWordPress Simplebooklet PDF Viewer and Embedder plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tribulant software newslettersWordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability7.6 High
- teastudio.pl wp posts carouselWordPress WP Posts Carousel plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- store locator widgets locator widgetWordPress Store Locator Widget plugin <= 2025r2 - CSRF to Stored XSS vulnerability7.1 High
- codemacher structured contentWordPress Structured Content plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- roxnor metformWordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- wow-company float menuWordPress Float menu plugin <= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability5.4 Medium
- conversios conversios.ioWordPress Conversios.io plugin <= 7.2.3 - Broken Access Control vulnerability4.3 Medium
- secupress, secupress free +1 moreWordPress SecuPress Free plugin <= 2.2.5.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ays pro chartifyWordPress Chartify plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- alex mills syntaxhighlighter evolvedWordPress SyntaxHighlighter Evolved plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- zoho subscriptions billing – embed payment formWordPress Zoho Billing – Embed Payment Form plugin <= 4.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- mahdi yousefi [mahdiy] افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری)WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- adnan analytify, analytify - google analytics dashboard +1 moreWordPress Analytify plugin <= 5.5.1 - Settings Change vulnerability4.3 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability5.4 Medium
- magepeopleteam wpeventlyWordPress WpEvently Plugin <= 4.2.9 - PHP Object Injection vulnerability7.5 High
- epsiloncool wp fast total searchWordPress WP Fast Total Search plugin <= 1.79.262 - Broken Access Control vulnerability4.3 Medium
- leadconnectorWordPress LeadConnector plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- magepeopleteam wptravellyWordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability8.8 High
- suiteplugins login widget for ultimate memberWordPress Login Widget for Ultimate Member plugin <= 1.1.2 - Local File Inclusion vulnerability7.5 High
- silverplugins217 custom fields account registration for woocommerceWordPress Custom Fields Account Registration For Woocommerce Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- magepeopleteam wpeventlyWordPress WpEvently Plugin <= 4.2.9 - Broken Access Control vulnerability5.3 Medium
- bit apps form, unknown bit form +1 moreWordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability4.7 Medium
- bit apps integrationsWordPress Bit Integrations plugin <= 2.4.10 - Open Redirection vulnerability4.7 Medium
- richplugins trust.reviewsWordPress Trust.Reviews plugin <= 2.3 - Broken Access Control vulnerability4.3 Medium
- themehunk big storeWordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability4.3 Medium
- moreconvert mc woocommerce wishlistWordPress MC Woocommerce Wishlist plugin <= 1.8.9 - SQL Injection vulnerability7.6 High
- fatcatapps quiz catWordPress Quiz Cat plugin <= 3.0.8 - Broken Access Control vulnerability2.7 Low
- jose specific content for mobileWordPress Specific Content For Mobile plugin <= 0.5.3 - Broken Access Control vulnerability4.3 Medium
- wpsoul greenshiftWordPress Greenshift plugin <= 11.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nitin prakash product author for woocommerceWordPress Product Author for WooCommerce plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability7.5 High
- maidul team managerWordPress Team Manager plugin <= 2.1.23 - Local File Inclusion Vulnerability7.5 High
- searchiqWordPress SearchIQ plugin <= 4.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- giannis kipouros terms & conditions per productWordPress Terms & Conditions Per Product plugin <= 1.2.15 - Broken Access Control Vulnerability5.3 Medium
- fuzzoid 3dprint liteWordPress 3DPrint Lite plugin <= 2.1.3.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- falselight exchange ratesWordPress Exchange Rates plugin <= 1.2.2 - Broken Access Control vulnerability4.3 Medium
- crm perks integration for google sheets and contact form 7, wpforms, elementor, ninja formsWordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- bill minozzi recaptcha for allWordPress reCAPTCHA for all plugin <= 2.22 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rustaurius five star restaurant reservationsWordPress Five Star Restaurant Reservations plugin <= 2.6.29 - Broken Access Control vulnerability4.9 Medium
- jory hogeveen off-canvas sidebars & menus (slidebars)WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- Show moreLoading…