CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- webinarpressWordPress Webinar Plugin <= 1.33.28 - Broken Access Control vulnerability4.3 Medium
- stylemix pearlWordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerability5.4 Medium
- stylemix pearlWordPress Pearl plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- dmitry v. (ceo of "ukr solution") barcode generator for woocommerceWordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Settings Change vulnerability5.4 Medium
- dmitry v. (ceo of "ukr solution") upc/ean/gtin code generatorWordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 - Settings Change vulnerability5.4 Medium
- magnigenie restropressWordPress RestroPress plugin <= 3.2.8 - Broken Access Control vulnerability4.3 Medium
- pluginic fancypostWordPress FancyPost plugin <= 6.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ajay webberzone snippetzWordPress WebberZone Snippetz plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sheetdbWordPress SheetDB plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- galaxy weblinks wp clone any post typeWordPress WP Clone any post type Plugin <= 3.6 - Broken Access Control vulnerability5.3 Medium
- galaxy weblinks wp clone any post typeWordPress WP Clone any post type Plugin <= 3.6 - Open Redirect vulnerability4.7 Medium
- exeideas international wp autokeywordWordPress WP AutoKeyword plugin <= 1.0 - Arbitrary Content Deletion vulnerability5.4 Medium
- modernaweb studio black widgets for elementorWordPress Black Widgets For Elementor plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- joomsky js job managerWordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability5.3 Medium
- joomsky js job managerWordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- ship depot shipdepot for woocommerceWordPress ShipDepot for WooCommerce plugin <= 1.2.19 - Broken Access Control vulnerability4.3 Medium
- cartbossWordPress CartBoss plugin <= 4.1.2 - Broken Access Control vulnerability4.3 Medium
- out the box beam me up scottyWordPress Beam me up Scotty – Back to Top Button plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- inspry agency toolkitWordPress Agency Toolkit plugin <= 1.0.24 - Broken Access Control vulnerability5.3 Medium
- pickplugins job board managerWordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerability5.3 Medium
- wporbit support perfect font awesome integrationWordPress Perfect Font Awesome Integration Plugin <= 2.3 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpeka wp adcenterWordPress WP AdCenter plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- feedbucket – website feedback toolWordPress Feedbucket – Website Feedback Tool Plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- wpwax directorist addonskit for elementorWordPress Directorist AddonsKit for Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- brainvireinfo export all post metaWordPress Export All Post Meta Plugin <= 1.2.1 - Broken Access Control vulnerability4.3 Medium
- softnwords smm apiWordPress SMM API plugin <= 6.0.31 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sharaz shahid simple sticky add to cart for woocommerceWordPress Simple Sticky Add To Cart For WooCommerce plugin <= 1.4.9 - Broken Access Control vulnerability4.3 Medium
- erez hadas-sonnenschein smartarget popupWordPress Smartarget Popup Plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- n-media bulk product syncWordPress Bulk Product Sync plugin <= 8.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- markkinchin beds24 online bookingWordPress Beds24 Online Booking plugin <= 2.0.27 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- redefiningtheweb pdf generator addon for elementor page builderWordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- fbtemplates nemesis all-in-oneWordPress Nemesis All-in-One plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpfactory advertsWordPress WordPress Adverts Plugin plugin <= 1.4 - Broken Access Control vulnerability5.3 Medium
- themelooks mfolio liteWordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jeroen schmit theater for wordpressWordPress Theater for WordPress plugin <= 0.18.7 - Broken Access Control vulnerability4.3 Medium
- rohit choudhary theme duplicatorWordPress Theme Duplicator Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- noor alam magical blocksWordPress Magical Blocks plugin <= 1.0.12 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wilson openai tools for wordpress & woocommerceWordPress OpenAI Tools for WordPress & WooCommerce plugin <= 2.2.1 - Broken Access Control vulnerability4.3 Medium
- viralloops viral loops wp integrationWordPress Viral Loops WP Integration Plugin <= 3.4.0 - Sensitive Data Exposure vulnerability5.3 Medium
- digireturn simple fixed noticeWordPress Simple Fixed Notice Plugin <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- digireturn dn footer contactsWordPress Footer Contacts Bar plugin <= 1.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- eventbee rsvp widgetWordPress Eventbee RSVP Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp codeus proposalsWordPress WP Proposals plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- matthewrubin review managerWordPress Review Manager plugin <= 2.5.0 - Broken Access Control vulnerability5.3 Medium
- brice capobianco wp plugin info cardWordPress WP Plugin Info Card plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themeglow jobboard job listingWordPress JobBoard Job listing plugin Plugin <= 1.2.8 - Broken Access Control vulnerability5.3 Medium
- themeglow jobboard job listingWordPress JobBoard Job listing plugin Plugin <= 1.2.8 - Insecure Direct Object References (IDOR) vulnerability4.9 Medium
- beee acf city selectorWordPress ACF City Selector plugin <= 1.17.0 - Sensitive Data Exposure vulnerability5.3 Medium
- team atomchat atomchatWordPress AtomChat plugin <= 1.1.7 - Broken Access Control vulnerability4.3 Medium
- uriahs victor printusWordPress Printus Plugin <= 1.2.6 - Broken Access Control vulnerability4.3 Medium
- Show moreLoading…