CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- contentmx content publisherWordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability5.4 Medium
- agency dominion inc. fusionWordPress Fusion plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aphotrax uptime robot plugin for wordpressWordPress Uptime Robot Plugin for WordPress plugin <= 2.3 - SQL Injection vulnerability8.5 High
- wp messiah swiss toolkit for wpWordPress Swiss Toolkit For WP plugin <= 1.4.0 - Broken Access Control vulnerability4.3 Medium
- wp messiah safe ai malware protection for wpWordPress Safe Ai Malware Protection for WP plugin <= 1.0.20 - Broken Access Control vulnerability5.4 Medium
- wp messiah swiss toolkit for wpWordPress Swiss Toolkit For WP plugin <= 1.4.5 - Broken Access Control vulnerability4.3 Medium
- twice commerce commerceWordPress Twice Commerce plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.20 - SQL Injection vulnerability8.5 High
- acmemediakits acme divi modulesWordPress ACME Divi Modules plugin <= 1.3.5 - Broken Access Control vulnerability4.3 Medium
- blocksera cryptocurrency widgets packWordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerability6.5 Medium
- checklistcom checklistWordPress Checklist plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- presstigers simple owl carouselWordPress Simple Owl Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- salesmate.io salesmate add-on for gravity formsWordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - Broken Access Control vulnerability5.3 Medium
- team atomchat atomchatWordPress AtomChat plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- smackcoders google seo pressor snippetWordPress Google SEO Pressor Snippet plugin <= 2.0 - Broken Access Control vulnerability4.3 Medium
- rashid slider path for elementorWordPress Slider Path for Elementor plugin <= 3.0.0 - Broken Access Control vulnerability4.3 Medium
- wokamoto staticpressWordPress StaticPress plugin <= 0.4.5 - Broken Access Control vulnerability4.3 Medium
- kishan wp link previewWordPress WP Link Preview plugin <= 1.4.1 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- eleopard behance portfolio managerWordPress Behance Portfolio Manager plugin <= 1.7.5 - SQL Injection vulnerability8.5 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 Web Management Interface SysToolChangePwd access control6.9 Medium
resticopenSUSESecurity update for resticNo score- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 Web Management Interface qossetting access control6.9 Medium
- red hat openshift lightspeedOls: unauthenticated metrics flooding in openshift lightspeed service leading to resource exhaustion7.5 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 default.cfg access control6.9 Medium
- e-solutions e-managementOS Command Injection vulnerability in e-management of e-solutions9.3 Critical
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 Web Management Interface AdvSetWrlsafeset access control6.9 Medium
- ta2g tantyyellowWordPress Tantyyellow theme <= 1.0.0.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themeix churelWordPress Churel plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crocoblock jetsmartfiltersWordPress JetSmartFilters plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- primekey ejbcaOpen Redirect vulnerability in EJBCA5.1 Medium
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 Web Management Interface AdvSetWrlmacfilter access control6.9 Medium
- primekey ejbcaImproper Neutralization of Special Elements vulnerability in EJBCA5.1 Medium
- e-solutions e-managementPath Traversal vulnerability in e-management of e-solutions8.7 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 Web Management Interface AdvSetWrlGstset access control6.9 Medium
- mayeenul islam nanosupportWordPress NanoSupport plugin <= 0.6.0 - Broken Access Control vulnerability4.3 Medium
- simplepress simple:pressWordPress Simple:Press plugin <= 6.11.5 - Broken Access Control vulnerability5.3 Medium
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 Web Management Interface AdvSetWrl access control6.9 Medium
- tinuzz trackserverWordPress Trackserver plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
apparmorSUSE,libapparmorSUSE +1 moreSecurity update for apparmorNo score- code-projects payroll management systemcode-projects Payroll Management System update_account.php sql injection5.3 Medium
- elextensions elex woocommerce request a quoteWordPress ELEX WooCommerce Request a Quote plugin <= 2.3.9 - Broken Access Control vulnerability4.3 Medium
- fast lta silent brick webuiReflected Cross-Site Scripting (XSS) Vulnerability in FAST LTA Silent Brick WebUI5.1 Medium
- fast lta silent brick webuiOS Command Injection Vulnerability in FAST LTA Silent Brick WebUI10.0 Critical
- code-projects payroll management systemcode-projects Payroll Management System delete.php sql injection5.3 Medium
- ashish ajani wp church donationWordPress WP Church Donation plugin <= 1.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- legrand sms powerviewLegrand SMS PowerView os command injection5.1 Medium
- legrand sms powerviewLegrand SMS PowerView file inclusion5.3 Medium
- legrand sms powerviewLegrand SMS PowerView cross site scripting5.1 Medium
- knime business hubCross-site scripting vulnerabilities in KNIME Business Hub web pages5.3 Medium
- legrand sms powerviewLegrand SMS PowerView redirect5.1 Medium
- Show moreLoading…