CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- bookingorWordPress Bookingor plugin <= 2.0.1 - Broken Access Control vulnerability4.3 Medium
- bowo variable inspectorWordPress Variable Inspector plugin <= 2.6.3 - Broken Access Control vulnerability4.3 Medium
- anzar ahmed display product variations dropdown on shop pageWordPress Display product variations dropdown on shop page plugin <= 1.1.3 - Broken Access Control vulnerability4.3 Medium
- wp event manager event managerWordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability5.3 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability5.4 Medium
- syntactics, inc. easyncWordPress eaSYNC plugin <= 1.3.19 - Broken Access Control vulnerability5.4 Medium
- realmag777 tableonWordPress TableOn plugin <= 1.0.5.1 - Broken Access Control vulnerability5.4 Medium
- wp messiah ai image alt text generator for wpWordPress Ai Image Alt Text Generator for WP plugin <= 1.1.1 - Broken Access Control vulnerability5.4 Medium
- anzar ahmed ni woocommerce cost of goodsWordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rocketelements split test for elementorWordPress Split Test For Elementor Plugin <= 1.8.3 - SQL Injection vulnerability7.6 High
- manu225 falling thingsWordPress Falling things Plugin <= 1.08 - SQL Injection vulnerability7.6 High
- xpro theme builderWordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerability4.3 Medium
- piotnetdotcom piotnet addons for elementorWordPress Piotnet Addons For Elementor plugin <= 2.4.36 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- blazethemes news kit elementor addonsWordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ecwid by lightspeed ecommerce shopping cart shopping cartWordPress Ecwid Shopping Cart plugin <= 7.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpminds simple wp eventsWordPress Simple WP Events plugin <= 1.8.17 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ultrapress ultra addons lite for elementorWordPress Ultra Addons Lite for Elementor plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webangon news element elementor blog magazineWordPress News Element Elementor Blog Magazine plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- smartwpress musician's pack for elementorWordPress Musician's Pack For Elementor plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- best wp developer bwd elementor addonsWordPress BWD Elementor Addons plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- illid advanced woo labelsWordPress Advanced Woo Labels plugin <= 2.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- quý lê 91 administrator zWordPress Administrator Z plugin <= 2026.03.02 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- turbo addons elementorWordPress Turbo Addons for Elementor plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- extend themes colibri page builderWordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bdthemes ultimate store kit elementor addonsWordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- galaxy weblinks video playlist for youtubeWordPress Video Playlist For YouTube plugin <= 6.7.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- spider themes elementsWordPress Spider Elements – Addons for Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- fast simon search, filters & merchandising for woocommerceWordPress Search, Filters & Merchandising for WooCommerce plugin <= 3.0.58 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- icopydoc maps for wpWordPress Maps for WP Plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pgn4web embed chessboardWordPress Embed Chessboard plugin <= 3.08.00 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gallerycreator simply galleryWordPress Gallery Blocks with Lightbox plugin <= 3.2.5 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- vektor,inc. vk filter searchWordPress VK Filter Search plugin <= 2.20.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tockify events calendarWordPress Tockify Events Calendar plugin <= 2.2.13 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bplugins b blocksWordPress B Blocks plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- yuri baranov yamaps for wordpressWordPress YaMaps for WordPress plugin <= 0.6.40 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- imtiaz rayhan table block by tablebergWordPress Table Block by Tableberg plugin <= 0.6.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- stylemix motorsWordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- suresh prasad showeblogin socialWordPress Showeblogin Social plugin <= 7.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- codeyatri gutenifyWordPress Gutenify plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- devsoftbaltic surveyjsWordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- john housholder emma for wordpressWordPress Emma for WordPress plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- fromdoppler doppler formsWordPress Doppler Forms plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- xpro elementor addonsWordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gwendydd chamber dashboard business directoryWordPress Chamber Dashboard Business Directory plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ryo arkhe blocksWordPress Arkhe Blocks plugin <= 2.27.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- radiustheme radius blocksWordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability7.5 High
- jakub glos sparkle elementor kitWordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability7.5 High
- alex prokopenko / justcoded just post preview widgetWordPress Just Post Preview Widget plugin <= 1.1.1 - Local File Inclusion vulnerability7.5 High
- markkinchin beds24 online bookingWordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…