CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- mestres do wp checkout mestres wpWordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability9.8 Critical
- intelcaprep site table of contentsWordPress Site Table of Contents plugin <= 0.3 - CSRF to Stored XSS vulnerability7.1 High
- sodena frescochat live chatWordPress FrescoChat Live Chat plugin <= 3.2.6 - CSRF to Stored XSS vulnerability7.1 High
- bogdan bendziukov squeezeWordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerability9.1 Critical
- croover.inc rich table of contentsWordPress Rich Table of Contents plugin <= 1.4.0 - Broken Access Control vulnerability4.3 Medium
- bogdan bendziukov squeezeWordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability2.7 Low
- uzair easyfontsWordPress Easyfonts plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jan boddez indieblocksWordPress IndieBlocks plugin <= 0.13.1 - Server Side Request Forgery (SSRF) Vulnerability5.4 Medium
- embeds for youtube plugin support youtube embedWordPress YouTube Embed plugin <= 5.3.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- phil age gateWordPress Age Gate plugin <= 3.5.4 - Broken Access Control Vulnerability5.3 Medium
- webliberty simple spoilerWordPress Simple Spoiler plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- robert noakes nav menu managerWordPress Nav Menu Manager plugin <= 3.2.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- austin comment validation reloadedWordPress Comment Validation Reloaded plugin <= 0.5 - CSRF to Stored XSS vulnerability7.1 High
- purab seo meta tagsWordPress Seo Meta Tags plugin <= 1.4 - CSRF to Privilege Escalation vulnerability8.8 High
- pagopar - grupo m s.a. – woocommerce gatewayWordPress Pagopar – WooCommerce Gateway plugin <= 2.7.1 - CSRF to Stored XSS vulnerability7.1 High
- adam nowak buddypress humanityWordPress Buddypress Humanity plugin <= 1.2 - CSRF to Privilege Escalation vulnerability9.8 Critical
- benjamin chris wp editor.md – the perfect wordpress markdown editorWordPress WP Editor.md – The Perfect Markdown Editor plugin <= 10.2.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- abozain albanna customize login pageWordPress Customize Login Page plugin <= 1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- wpsolrWordPress WPSolr plugin <= 24.0 - CSRF to Privilege Escalation vulnerability8.8 High
- rtakao sandwich adsenseWordPress Sandwich Adsense plugin <= 4.0.2 - Broken Access Control Vulnerability5.3 Medium
- essential marketer breadcrumbsWordPress Essential Breadcrumbs plugin <= 1.1.1 - CSRF to Privilege Escalation vulnerability8.8 High
- bhoogterp scheduledWordPress Scheduled plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- asaquzzaman mishu woo product feed for marketing channelsWordPress Woo Product Feed For Marketing Channels plugin <= 1.9.0 - Broken Access Control Vulnerability7.5 High
- theode language fieldWordPress Language Field plugin <= 0.9 - CSRF to Stored XSS vulnerability7.1 High
- bdoga social crowdWordPress Social Crowd plugin <= 0.9.6.1 - CSRF to Stored XSS vulnerability7.1 High
- doa the worldWordPress The World plugin <= 0.4 - CSRF to Stored XSS vulnerability7.1 High
- regen script compressorWordPress Script Compressor plugin <= 1.7.1 - CSRF to Stored XSS vulnerability7.1 High
- shameem reza smart product gallery sliderWordPress Smart Product Gallery Slider plugin <= 1.0.4 - CSRF to Stored XSS vulnerability7.1 High
- kailey (trepmal) more mime type filtersWordPress More Mime Type Filters plugin <= 0.3 - CSRF to Stored XSS vulnerability7.1 High
- vfvalent social bookmarking reloadedWordPress Social Bookmarking RELOADED plugin <= 3.18 - CSRF to Stored XSS vulnerability7.1 High
- chandan garg cg scroll to topWordPress CG Scroll To Top plugin <= 3.5 - CSRF to Stored XSS vulnerability7.1 High
- a.ankit easy custom cssWordPress Easy Custom CSS plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- icyleaf ws audio playerWordPress WS Audio Player plugin <= 1.1.8 - CSRF to Stored XSS vulnerability7.1 High
- newsboard plugin post and rss scrollerWordPress NewsBoard Post and RSS Scroller plugin <= 1.2.12 - CSRF to Stored XSS vulnerability7.1 High
- mmetrodw mmx – make me christmasWordPress MMX – Make Me Christmas plugin <= 1.0.0 - CSRF to Stored XSS vulnerability7.1 High
- blueinstyle advanced tag listsWordPress Advanced Tag Lists plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- wladyslaw madejczyk af tell a friendWordPress AF Tell a Friend plugin <= 1.4 - CSRF to Stored XSS vulnerability7.1 High
- jordi salord wp-easy menuWordPress WP-Easy Menu plugin <= 0.41 - CSRF to Stored XSS vulnerability7.1 High
- ab-tools flags widgetWordPress Flags Widget plugin <= 1.0.7 - CSRF to Stored XSS vulnerability7.1 High
- mario aguiar wp sexylightboxWordPress WP SexyLightBox plugin <= 0.5.3 - CSRF to Stored XSS vulnerability7.1 High
- dalziel windows live writerWordPress Windows Live Writer plugin <= 0.1 - CSRF to Stored XSS vulnerability7.1 High
- quanganhdo custom smiliesWordPress Custom Smilies plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- ninotheme nino social connectWordPress Nino Social Connect plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1 High
- scott salisbury request call backWordPress Request Call Back plugin <= 1.4.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- bjoern wp performance packWordPress WP Performance Pack plugin <= 2.5.4 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- mathieu chartier wp-planificationWordPress WP-Planification – WP-Planning plugin <= 2.3.1 - CSRF to Stored XSS vulnerability7.1 High
- آریا وردپرس aria fontWordPress Aria Font plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- joe waymarkWordPress Waymark plugin <= 1.5.2 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- tim wetterwarnerWordPress Wetterwarner plugin <= 2.7.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- vibethemes bp social connectWordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- Show moreLoading…