CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- improve my city my cityWordPress Improve My City plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound wp azure offloadWordPress WP Azure offload plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- stenciesWordPress Stencies plugin <= 0.58 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- boggibill getshop ecommerceWordPress GetShop ecommerce plugin <= 1.3 - Path Traversal vulnerability8.1 High
- labs64 pluginpassWordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerability8.6 High
- jajapagamentos já-já pagamentos for woocommerceWordPress Já-Já Pagamentos for WooCommerce plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- erlang otpKEX init error results with excessive memory usage7.5 High
- emlogEmlog Pro contains an SQL injection vulnerability.7.7 High
- metabaseMetabase vulnerable to circumvention of local link access protection in GeoJson endpoint2.1 Low
- jaredallard archivesarchives: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6.0 Medium
- goauthentik authentikauthentik's deletion of sessions did not revoke sessions when using database session storage8.0 High
- publify, publify core +1 morePublify Vulnerable To Cross-Site Scripting (XSS) Via Redirects Requiring User Interaction1.8 Low
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +1 more +3 moreEvent-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda6.5 Medium
python-requestsSUSESecurity update for python-requestsNo score- w3 css validatorThere is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request forgery (SSRF). This could be exploited to…8.4 High
- arteche satech bcu, satech bcu firmware +1 moreReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCU2.4 Low
- arteche satech bcu, satech bcu firmware +1 moreReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCU2.0 Low
- arteche satech bcu, satech bcu firmware +1 moreCross-site request forgery (CSRF) vulnerability in saTECH BCU5.7 Medium
- ibm powervm hypervisorIBM PowerVM Hypervisor data manipulation4.5 Medium
- arteche satech bcu, satech bcu firmware +1 moreWeak Encoding for Password vulnerability in saTECH BCU6.9 Medium
- arteche satech bcu, satech bcu firmware +1 moreCleartext Transmission of Sensitive Information vulnerability in saTECH BCU6.9 Medium
- arteche satech bcu, satech bcu firmware +1 moreExposure of Sensitive Information vulnerability in saTECH BCU6.9 Medium
- arteche satech bcu, satech bcu firmware +1 moreImproper Authentication vulnerability in saTECH BCU6.9 Medium
- arteche satech bcu, satech bcu firmware +1 morePrivilege escalation vulnerability in saTECH BCU8.5 High
- fermax meetmeImproper Restriction of Excessive Authentication Attempts vulnerability in MeetMe products5.3 Medium
- streamsoft prestiżWeak password encoding in Streamsoft Prestiż8.2 High
- streamsoft prestiżSQL Injection in Streamsoft Prestiż8.6 High
- fermax meetmeUser enumeration vulnerability in MeetMe products6.9 Medium
- fermax duoxme ios applicationLack of encryption vulnerability in DuoxMe6.9 Medium
- fermax meetmeInsufficiently Protected Credentials vulnerability in MeetMe products8.5 High
- chop chop pop-up chop chopWordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability7.5 High
- miguel sirvent magic embedsWordPress Magic Embeds plugin <= 3.1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- efficient scripts microblog posterWordPress Microblog Poster plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- adrian tobey formlift for infusionsoft web formsWordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- benoit de boeck wp supersizedWordPress WP Supersized plugin <= 3.1.6 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- david miller wp-ogpWordPress WP-OGP plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- tobias .merz browser caching with .htaccessWordPress Browser Caching with .htaccess 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- krzysztof furtak kk i like itWordPress KK I Like It plugin <= 1.7.5.3 - CSRF to Stored XSS vulnerability7.1 High
- strategy11 team terms of useWordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- youtag showtime slideshowWordPress ShowTime Slideshow plugin <= 1.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- misteraon simple trackback disablerWordPress Simple Trackback Disabler plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- nertworks all in one social share toolsWordPress NertWorks All in One Social Share Tools plugin <=1.26 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- erich the visitor counterWordPress The Visitor Counter plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- kevinweber wbounceWordPress wBounce plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- phantom.omaga toggle boxWordPress Toggle Box plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- stian andreassen youtube simplegalleryWordPress YouTube SimpleGallery plugin <= 2.0.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- mindshare labs, inc. wp ultimate searchWordPress WP Ultimate Search plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- bsndev ultimate security checkerWordPress Ultimate Security Checker plugin <= 4.2 - Cross Site Request Forgery (CSRF) to Security Rescan vulnerability4.3 Medium
- forsgren video embedderWordPress Video Embedder plugin <= 1.7.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- aurélien lws lws smsWordPress LWS SMS plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- Show moreLoading…