CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- rockgod100 theme file duplicatorWordPress Theme File Duplicator Plugin <= 1.3 - Arbitrary File Download vulnerability6.5 Medium
- rockgod100 theme file duplicatorWordPress Theme File Duplicator Plugin <= 1.3 - Arbitrary File Upload vulnerability9.9 Critical
- divspark flagged contentWordPress Flagged Content Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- saoshyant1994 saoshyant sliderWordPress Saoshyant Slider Plugin <= 3.0 - PHP Object Injection vulnerability9.8 Critical
- ays pro easy formWordPress Easy Form by AYS Plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bjornw file iconsWordPress File Icons Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ssvadim ss quizWordPress SS Quiz Plugin <= 2.0.5 - PHP Object Injection vulnerability9.8 Critical
- antoine guillien restrict taxonomiesWordPress Restrict Taxonomies Plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- poppinsdigital.com wpyog documents, wpyog documents +1 moreWordPress WPYog Documents Plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- uxgallery wordpress photo gallery – image galleryWordPress Photo Gallery – Image Gallery Plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpion live cssWordPress Live css plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- webparexapp shipmozo courier trackingWordPress Shipmozo Courier Tracking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wp asia myticket eventsWordPress MyTicket Events plugin <= 1.2.4 - Non-Arbitrary File Read vulnerability5.3 Medium
- cmstactics wp video postsWordPress WP Video Posts plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- claudio adrian marrero chatliveWordPress CHATLIVE plugin <= 2.0.1 - SQL Injection vulnerability9.3 Critical
- jeannot muller flickr-slideshow-wrapperWordPress flickr-slideshow-wrapper Plugin <= 5.4.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- bernd altmeier google maps gpx viewerWordPress Google Maps GPX Viewer Plugin <= 3.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- radius of thought page and post listerWordPress Page and Post Lister plugin <= 1.2.1 - Arbitrary Content Deletion vulnerability6.5 Medium
- kush sharma micro newsWordPress Kush Micro News Plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- bappa mal qr code for woocommerceWordPress QR Code for WooCommerce Plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ivan82 user listWordPress User List plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- 17track for woocommerceWordPress 17TRACK for WooCommerce Plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kontur fontsamplerWordPress Fontsampler Plugin <= 0.4.14 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- alvego protected wp-loginWordPress Protected wp-login Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- graphems list urlsWordPress List Urls Plugin <= 0.2 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- deetronix booking ultra proWordPress Booking Ultra Pro Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- webilop woocommerce html5 videoWordPress WooCommerce HTML5 Video Plugin <= 1.7.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- phil88530 simple email subscriberWordPress Simple Email Subscriber plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gerrygooner rebuild permalinksWordPress Rebuild Permalinks Plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- arete-it activity reactions for buddypressWordPress Activity Reactions For Buddypress plugin <= 1.0.22 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jbhovik ray enterprise translationWordPress Ray Enterprise Translation plugin <= 1.7.0 - Local File Inclusion via CSRF Vulnerability7.5 High
- firedrum email marketingWordPress FireDrum Email Marketing plugin <= 1.64 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- videowhisper paid videochat turnkey siteWordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability9.8 Critical
- silvasoft boekhoudenWordPress Silvasoft boekhouden plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- websitedefender wp secureWordPress wp secure plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability7.1 High
- aakif kadiwala event espresso – custom email template shortcodeWordPress Event Espresso plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bendlz at internet smarttagWordPress AT Internet SmartTag plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- commotion course booking systemWordPress Course Booking System plugin <= 6.1.2 - Reflected Cross Site Scripting (XSS) Vulnerability7.1 High
- revampcrm revamp crm for woocommerceWordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- excellent dynamics make email customizer for woocommerceWordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cscode woocommerce estimate and quoteWordPress WooCommerce Estimate and Quote plugin <= 1.0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- totalprocessing nomupay payment processing gatewayWordPress Total processing card payments for WooCommerce plugin <= 7.1.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- terminalafrica terminal africaWordPress Terminal Africa plugin <= 1.13.24 - Cross Site Scripting (XSS) vulnerability7.1 High
- m. ali saleem wordpress health and server condition – integrated with google page speedWordPress WordPress Health and Server Condition plugin <= 4.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ilghera related videos for jw playerWordPress Related Videos for JW Player plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- coolhappy cool flipbox – shortcode & gutenberg blockWordPress Cool Flipbox plugin <= 1.8.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability7.1 High
- saad iqbal license manager for woocommerceWordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pey22 t&p gallery sliderWordPress T&P Gallery Slider plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability7.1 High
- ione360 configuratorWordPress iONE360 configurator plugin <= 2.0.57 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…