CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- josheli simple google photos gridWordPress Simple Google Photos Grid plugin <= 1.5 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- vinodvaswani9 bulk assign linked products for woocommerceWordPress Bulk Assign Linked Products For WooCommerce plugin <= 2.1 - Broken Access Control Vulnerability5.3 Medium
- carlo la pera wp customize login pageWordPress WP Customize Login Page plugin <= 1.6.5 - Broken Access Control Vulnerability5.3 Medium
- carlo la pera wp customize login pageWordPress WP Customize Login Page plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- benjamin buddle send fromWordPress Send From plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- ralf hortt confirm user registrationWordPress Confirm User Registration plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- syed balkhi floating social barWordPress Floating Social Bar plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- casey johnson loan calculatorWordPress Loan Calculator plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- elrata wp-recaptcha-bpWordPress WP-reCAPTCHA-bp plugin <= 4.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- wpdrift.no landing pages and domain aliases for wordpressWordPress Landing pages and Domain aliases for WordPress plugin <= 0.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- stressfree sites business contact widgetWordPress Business Contact Widget plugin <= 2.7.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- msmitley wp cookie consentWordPress WP Cookie Consent plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- silver muru ws force login pageWordPress WS Force Login Page plugin <= 3.0.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- wpdiscover blog manager wpWordPress Blog Manager WP plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- codebangers all in one time clock liteWordPress All in One Time Clock Lite plugin < 1.3.326 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- andrey mikhalchuk 360 viewWordPress 360 View plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- farinspace peekabooWordPress Peekaboo plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- biancardi mixcloud embedWordPress Mixcloud Embed plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- oniswap mini twitter feedWordPress Mini twitter feed plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- matthew muro multi-column taxonomy listWordPress Multi-Column Taxonomy List plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- alex moss peadig’s google +1 buttonWordPress Peadig’s Google +1 Button plugin <= 0.1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- devyncjohnson bbcode deluxeWordPress BBCode Deluxe plugin <= 2020.08.01.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- joe dolson able playerWordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- gnanavelshenll wp custom post popupWordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- rahendra putra k™ raphiconWordPress RAphicon plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- relentless apps rrssbWordPress RRSSB plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ahsanullah akanda wp custom cms blockWordPress Wp Custom CMS Block plugin <= 2.1 - CSRF to Stored XSS vulnerability7.1 High
- creatorteam zoho creator formsWordPress Zoho Creator Forms <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- novium wowhead tooltipsWordPress WoWHead Tooltips plugin <= 2.0.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- preya external markdownWordPress External Markdown plugin <= 0.0.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- themexpert xpert tabWordPress Xpert Tab plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- warmwhisky gtdb guitar tunersWordPress GTDB Guitar Tuners plugin <= 4.2.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- chris mok gna search shortcodeWordPress GNA Search Shortcode plugin <= 0.9.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- webplanetsoft inline text popupWordPress Inline Text Popup plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- richardharrison carousel-of-post-imagesWordPress Carousel-of-post-images plugin <= 1.07 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- danielriera image style hoverWordPress Image Style Hover plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- haris zulfiqar tooltipWordPress Tooltip plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- huangye wudeng hacklog remote attachmentWordPress Hacklog Remote Attachment plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- steve availability calendarWordPress Availability Calendar plugin <= 0.2.4 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- stesvis wp filter post categoryWordPress WP Filter Post Category plugin <= 2.1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- billy bryant tabsWordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- alphasis related posts via taxonomiesWordPress Related Posts via Taxonomies plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- silencecm twitter card generatorWordPress Twitter Card Generator plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- milat jquery automatic popupWordPress Milat jQuery Automatic Popup plugin <= 1.3.1 - CSRF to Stored XSS vulnerability7.1 High
- shamim hasan custom functions pluginWordPress Custom Functions Plugin plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- harrysudana contact form 7 calendarWordPress Contact Form 7 Calendar plugin <= 3.0.1 - CSRF to Stored XSS vulnerability7.1 High
- kasonzhao advanced lazy loadWordPress Advanced lazy load plugin <= 1.6.0 - CSRF to Stored XSS vulnerability7.1 High
- lora77 wpzon – amazon affiliate pluginWordPress WpZon – Amazon Affiliate Plugin plugin <= 1.3 - CSRF to XSS vulnerability7.1 High
- olar marius vasaio qr codeWordPress Vasaio QR Code plugin <= 1.2.5 - CSRF to XSS vulnerability7.1 High
- bas matthee lsd custom taxonomy and category metaWordPress LSD Custom taxonomy and category meta plugin <= 1.3.2 - CSRF to XSS vulnerability7.1 High
- Show moreLoading…