CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- maximevalette ical feedsWordPress iCal Feeds Plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tychesoftwares arconix faqWordPress Arconix FAQ plugin <= 1.9.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wp swings wallet system for woocommerceWordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pei yong goh uxsniffWordPress UXsniff plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- digireturn dn shipping by weight for woocommerceWordPress DN Shipping by Weight for WooCommerce Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- matat technologies deliver via shipos for woocommerceWordPress Deliver via Shipos for WooCommerce Plugin <= 2.1.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- feedify – web push notificationsWordPress Feedify – Web Push Notifications plugin <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- softagon woocommerce products without featured imagesWordPress WooCommerce Products without featured images Plugin <= 0.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- the right software woocommerce loyal customersWordPress WooCommerce Loyal Customers plugin <= 2.6 - Broken Access Control vulnerability7.5 High
- gtlwpdev all push notification for wpWordPress All push notification for WP Plugin <= 1.5.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpfactory msrp (rrp) pricing for woocommerceWordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- borisolhor hamburger icon menu liteWordPress Hamburger Icon Menu Lite Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- rico macchi wp featured screenshotWordPress WP Featured Screenshot Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- raptive adsWordPress Raptive Ads plugin <= 3.7.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- plugins.club wp debug toggleWordPress WP_DEBUG Toggle plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mohammad i. okfie wp-hijriWordPress WP-Hijri Plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- aviplugins.com wp easy pollWordPress WP Easy Poll Plugin <= 2.2.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ashraful sarkar naiem license for envatoWordPress License For Envato Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tomroyal stop registration spamWordPress Stop Registration Spam Plugin <= 1.24 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- turitop booking systemWordPress TuriTop Booking System Plugin <= 1.0.10 - PHP Object Injection vulnerability8.8 High
- kiotviet syncWordPress KiotViet Sync Plugin <= 1.8.3 - SQL Injection vulnerability8.5 High
- climax themes kata plusWordPress Kata Plus Plugin <= 1.5.3 - PHP Object Injection vulnerability9.8 Critical
- exeideas international wp autokeywordWordPress WP AutoKeyword Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- mapro collins coming soon countdownWordPress Coming Soon Countdown Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- termel pdf 2 postWordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability9.9 Critical
- tzin111 web2applicationWordPress Web2application Plugin <= 6.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- credova financial financialWordPress Credova_Financial plugin <= 2.4.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bytes technolab add product frontend for woocommerceWordPress Add Product Frontend for WooCommerce plugin <= 1.0.8 - Arbitrary Content Deletion vulnerability8.2 High
- realmag777 tableonWordPress TableOn Plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- wpminds simple wp eventsWordPress Simple WP Events plugin <= 1.8.17 - Sensitive Data Exposure vulnerability7.5 High
- wpcraft woomsWordPress WooMS Plugin <= 9.12 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- rameez iqbal real estate managerWordPress Real Estate Manager plugin <= 7.3 - Arbitrary Code Execution vulnerability7.3 High
- expresstechsoftware memberpress discord addonWordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sajjad aslani awsa shippingWordPress AWSA Shipping Plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- deepak khokhar listings for buildiumWordPress Listings for Buildium plugin <= 0.1.5 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- picture-planet gmbh verowa connectWordPress Verowa Connect Plugin <= 3.0.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- movylo marketing automationWordPress Movylo Marketing Automation Plugin <= 2.0.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- bowo debug log managerWordPress Debug Log Manager plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- we are de woocommerce tbc credit card payment gateway (free)WordPress WooCommerce TBC Credit Card Payment Gateway (Free) Plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- clinked client portalWordPress Clinked Client Portal Plugin <= 1.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- otp-less one tap sign in, thedrifted otp-less one tap sign in +1 moreWordPress OTP-less one tap Sign in Plugin <= 2.0.58 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fromdoppler doppler formsWordPress Doppler Forms plugin <= 2.4.6 - Broken Access Control vulnerability7.1 High
- joomsky js job managerWordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability9.3 Critical
- pootlepress mobile pagesWordPress Mobile Blocks Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wp wham crowdfunding for woocommerceWordPress Crowdfunding for WooCommerce Plugin <= 3.1.12 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mdedev run contests, raffles, and giveaways with contestswpWordPress Run Contests, Raffles, and Giveaways plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cmsjunkie - wordpress business directory plugins wp-businessdirectoryWordPress WP-BusinessDirectory Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- matthewrubin local magicWordPress Local Magic plugin <= 2.9.0 - SQL Injection vulnerability9.3 Critical
- hive support supportWordPress Hive Support plugin <= 1.2.6 - Sensitive Data Exposure vulnerability7.5 High
- ketanajani wp donateWordPress WP Donate Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…