CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- labcat processing projectsWordPress Processing Projects plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- richtexteditor rich text editorWordPress Rich Text Editor plugin <= 1.0.1 - CSRF to Stored XSS vulnerability7.1 High
- davidpaulsson bybrick accordionWordPress byBrick Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- carperfer covermanagerWordPress CoverManager plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jaap jansma connector to civicrm with civimcrestfaceWordPress Connector to CiviCRM with CiviMcRestFace plugin <= 1.0.10 - Broken Access Control vulnerability5.3 Medium
- gagan deep singh postmarkapp email integratorWordPress PostmarkApp Email Integrator plugin <= 2.4 - CSRF to Stored XSS vulnerability7.1 High
- admingeekz varnish wordpressWordPress Varnish WordPress plugin <= 1.7 - CSRF to Stored XSS vulnerability7.1 High
- owenr88 simple contact formsWordPress Simple Contact Forms plugin <= 1.6.4 - CSRF to Stored XSS vulnerability7.1 High
- hiroprot terms before downloadWordPress Terms Before Download plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aboobacker. ab google map travelWordPress AB Google Map Travel plugin <= 4.6 - CSRF to Stored XSS vulnerability7.1 High
- shaharia azam auto post after image uploadWordPress Auto Post After Image Upload plugin <= 1.6 - Broken Access Control vulnerability4.3 Medium
- gingerplugins notification bar, sticky notification bar, sticky welcome bar for any themeWordPress Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- arni cinco wpcargo track & traceWordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- redim gmbh cookiehint wpWordPress CookieHint WP plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- flomei simple-audioplayerWordPress Simple-Audioplayer plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- softpulseinfotech sp blog designerWordPress SP Blog Designer plugin <= 1.0.0 - Arbitrary Shortcode Execution vulnerability4.8 Medium
- weblineindia welcome popupWordPress Welcome Popup plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- cal.comWordPress Cal.com plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- moshensky cf7 spreadsheetsWordPress CF7 Spreadsheets plugin <= 2.3.2 - Settings Change vulnerability5.4 Medium
- proptech plugin apimo connectorWordPress Apimo Connector plugin <= 2.6.5.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- appointy appointment schedulerWordPress Appointy Appointment Scheduler plugin <= 4.2.1 - CSRF to Settings Change vulnerability6.5 Medium
- designnbuy designoWordPress DesignO plugin <= 2.6.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wpfactory quantity dynamic pricing & bulk discounts for woocommerceWordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.3 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- crazycric ultimate live cricket wordpress liteWordPress Ultimate Live Cricket WordPress Lite plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- chatwee chat by chatweeWordPress Chat by Chatwee plugin <= 2.1.3 - Broken Access Control vulnerability4.3 Medium
- wpdiscover timeline event historyWordPress Timeline Event History plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- openmenuWordPress OpenMenu plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- paolo melchiorre send e-mailWordPress Send E-mail plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- promoz73 exit popup freeWordPress Exit Popup Free plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- denra.com wp date and time shortcodeWordPress WP Date and Time Shortcode plugin <= 2.6.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kibru demeke ethiopian calendarWordPress Ethiopian Calendar plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- elfsight testimonials sliderWordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability5.4 Medium
- elfsight testimonials sliderWordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ghozylab gallery – photo albums pluginWordPress Gallery – Photo Albums Plugin plugin <= 1.3.170 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- leadfox for wordpressWordPress Leadfox for WordPress plugin <= 2.1.9 - CSRF to Stored XSS vulnerability7.1 High
- elfsight testimonials sliderWordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerability5.4 Medium
- ashish ajani wp copy media urlWordPress WP Copy Media URL plugin <= 2.1 - CSRF to Stored XSS vulnerability7.1 High
- appointifyWordPress Appointify plugin <= 1.0.8 - Arbitrary File Upload vulnerability6.6 Medium
- gagan deep singh postmarkapp email integratorWordPress PostmarkApp Email Integrator plugin <= 2.4 - Broken Access Control vulnerability4.3 Medium
- vasilis triantafyllou flag iconsWordPress Flag Icons plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- softhopper custom content scrollbarWordPress Custom Content Scrollbar plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- v20202020 multi days events and multi events in one day calendarWordPress Multi Days Events and Multi Events in One Day Calendar plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wp-buy related posts widget with thumbnailsWordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- wp-buy wordpress related posts with thumbnailsWordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability7.1 High
- themesflat themesflat-addons-for-elementorWordPress Themesflat Addons For Elementor plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- riosisgroup rio video galleryWordPress Rio Video Gallery plugin <= 2.3.6 - CSRF to Stored XSS vulnerability7.1 High
- aphotrax uptime robot plugin for wordpressWordPress Uptime Robot Plugin for WordPress plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- caspio bridge custom database applications by caspioWordPress Custom Database Applications by Caspio plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mika osmWordPress OSM plugin <= 6.1.13 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- idx broker impress for idx brokerWordPress IMPress for IDX Broker plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…