CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- linux, linux kernel +1 morejfs: add check read-only before txBeginAnon() call5.5 Medium
- linux, linux kernel +1 morejfs: add check read-only before truncation in jfs_truncate_nolock()7.8 High
- linux, linux kernel +1 morePCI/ASPM: Fix link state exit during switch upstream function removal7.8 High
- linux, linux kernel +1 morentb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans7.1 High
- tenda w12, w12 firmware +1 moreTenda W12 httpd cgiWifiRadioSet stack-based overflow8.7 High
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Master.php cross site scripting4.8 Medium
- mirweiye seven bears library cmsmirweiye Seven Bears Library CMS Add Link server-side request forgery5.1 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System edit-services.php sql injection6.9 Medium
- yuya hoshino bulk term editorWordPress Bulk Term Editor plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- asgaros forumWordPress Asgaros Forum plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- activedemand online agency marketing automation activedemandWordPress ActiveDEMAND plugin <= 0.2.46 - Broken Access Control vulnerability5.3 Medium
- alan petersen author wip progress barWordPress Author WIP Progress Bar plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- tnomi attendance managerWordPress Attendance Manager plugin <= 0.6.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wp map plugins basic interactive world mapWordPress Basic Interactive World Map plugin <= 2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- wp wham checkout files upload for woocommerceWordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- redefiningtheweb bma liteWordPress BMA Lite plugin <= 1.4.2 - SQL Injection vulnerability7.6 High
- bplugins html5 audio playerWordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- sebastian lee dynamic postWordPress Dynamic Post plugin <= 5.03 - Settings Change vulnerability5.4 Medium
- wpwax logo carousel sliderWordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- robin cornett scriptless social sharingWordPress Scriptless Social Sharing plugin <= 3.3.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- rescue themes shortcodes, rescuethemes rescue shortcodes +1 moreWordPress Rescue Shortcodes plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- slazzercom slazzer background changerWordPress Slazzer Background Changer plugin <= 3.14 - Broken Access Control Vulnerability5.3 Medium
- dsky site search 360WordPress Site Search 360 plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) to stored XSS vulnerability7.1 High
- mathieu chartier wp-advanced-searchWordPress WP-Advanced-Search plugin <= 3.3.9.4 - Arbitrary File Upload Vulnerability6.6 Medium
- rhys wynne wp flipclockWordPress WP Flipclock plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bill minozzi wp toolsWordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerability7.4 High
- wp royal royal elementor addonsWordPress Royal Elementor Addons plugin <= 1.3.977 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- miniorange wordpress rest api authenticationWordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability5.4 Medium
- toast plugins internal link optimiserWordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability7.1 High
- quomodosoft elementsready addons for elementorWordPress ElementsReady Addons for Elementor plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- a wp life right click disable or banWordPress Right Click Disable OR Ban plugin <= 1.1.17 - CSRF to Stored XSS vulnerability7.1 High
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control Vulnerability5.4 Medium
- whiletrue most and least read posts widgetWordPress Most And Least Read Posts Widget plugin <= 2.5.20 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- andy moyle church adminWordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- stellarwp kadence woocommerce email designerWordPress Kadence WooCommerce Email Designer plugin <= 1.5.14 - Arbitrary File Upload vulnerability9.1 Critical
- mediavine control panelWordPress Mediavine Control Panel plugin <= 2.10.6 - Sensitive Data Exposure vulnerability5.3 Medium
- wp trio conditional payments for woocommerceWordPress Conditional Payments for WooCommerce plugin <= 3.3.0 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- shahjada live formsWordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerability5.4 Medium
- wp trio conditional shipping for woocommerceWordPress Conditional Shipping for WooCommerce plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- bob hostelWordPress Hostel plugin <= 1.1.5.6 - SQL Injection Vulnerability7.6 High
- melapress login securityWordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability6.6 Medium
- lomu wpcom memberWordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion Vulnerability8.8 High
- noor alam checkout for paypalWordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpxpo wowstoreWordPress WowStore plugin <= 4.2.4 - Broken Access Control Vulnerability4.3 Medium
- uiux lab uix shortcodesWordPress Uix Shortcodes plugin <= 2.0.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- teastudio.pl wp posts carouselWordPress WP Posts Carousel plugin <= 1.3.10 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpsight wpcasaWordPress WPCasa plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- property hive propertyhiveWordPress PropertyHive plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- greg winiarski wpadvertsWordPress WPAdverts plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wp swings membership for woocommerceWordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- Show moreLoading…