CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- envothemes envo extraWordPress Envo Extra plugin <= 1.9.9 - Broken Access Control Vulnerability4.3 Medium
- senols gpt3 ai content writerWordPress GPT3 AI Content Writer plugin <= 1.9.14 - Cross Site Request Forgery (CSRF) to Prompt Generation vulnerability4.3 Medium
- slui media hygieneWordPress Media Hygiene plugin <= 4.0.0 - Broken Access Control Vulnerability5.4 Medium
- hashthemes hash formWordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- gs plugins testimonial sliderWordPress GS Testimonial Slider plugin <= 3.3.0 - Broken Access Control Vulnerability4.3 Medium
- rustaurius ultimate wp mailWordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- creativethemeshq blocksyWordPress Blocksy theme <= 2.0.97 - Broken Access Control Vulnerability4.9 Medium
- solacewp solace extraWordPress Solace Extra plugin <= 1.3.1 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- ohidul islam challanWordPress Challan plugin <= 3.7.58 - CSRF to Privilege Escalation vulnerability8.8 High
- trackship for woocommerceWordPress TrackShip for WooCommerce plugin <= 1.9.1 - SQL Injection Vulnerability7.6 High
- roxnor fundengineWordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- dgamoni locateandfilterWordPress LocateAndFilter plugin <= 1.6.16 - Broken Access Control Vulnerability5.3 Medium
- crm perks wp gravity forms zendeskWordPress WP Gravity Forms Zendesk plugin <= 1.1.2 - Open Redirection Vulnerability4.7 Medium
- crm perks integration for woocommerce and salesforceWordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection Vulnerability4.7 Medium
- crm perks wp gravity forms dynamics crmWordPress WP Gravity Forms Dynamics CRM plugin <= 1.1.4 - Open Redirection Vulnerability4.7 Medium
- silverplugins217 product quantity dropdown for woocommerceWordPress Product Quantity Dropdown For Woocommerce plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability5.3 Medium
- jordy meow meow galleryWordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.1.9 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- hossni mubarak cool author boxWordPress Cool Author Box plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- listamesterWordPress Listamester plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wpdevart widget countdownWordPress Widget Countdown plugin <= 2.7.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- cc bmi calculatorWordPress CC BMI Calculator plugin <= 2.1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- chris reynolds progress barWordPress Progress Bar plugin <= 2.2.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- greg winiarski wpadvertsWordPress WPAdverts plugin <= 2.2.2 - Local File Inclusion Vulnerability7.5 High
- wp chill download monitorWordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability7.5 High
- djangoproject djangoDjango has a denial-of-service possibility in strip_tags()5.3 Medium
- linux, linux kernel +1 morenet_sched: keep alloc_hash updated after hash allocation7.8 High
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager information disclosure7.5 High
- m a vinoth kumar frontend dashboardFrontend Dashboard 1.0 - 2.2.6 - Missing Authorization to Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post Function9.8 Critical
- royal-elementor-addons royal elementor addonsWordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- apache activemqApache ActiveMQ: Unchecked buffer length can cause excessive memory allocation6.9 Medium
- google android, samsung mobile libsavscmn +1 moreOut-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory...4.0 Medium
- google android, samsung mobile libsavscmn +1 moreOut-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary...8.4 High
- samsung mobile penupImproper access control in PENUP prior to version 3.9.19.32 allows local attackers to access...6.2 Medium
- samsung notesUse of implicit intent for sensitive communication in translation in Samsung Notes prior to...3.3 Low
- samsung notesOut-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23...5.5 Medium
- samsung mobile aodserviceImproper Export of Android Application Components in AODService prior to version 8.8.28.12 allows...5.5 Medium
- samsung mobile packageinstallercnImproper handling of insufficient permission in PackageInstallerCN prior to version 15.0.11.0...6.1 Medium
- samsung mobile secure folderImproper authentication in Secure Folder prior to version 1.8.12.0 in Android 13, and 1.9.21.00...5.4 Medium
- samsung flowImproper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6...6.2 Medium
- samsung flowImproper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to...5.5 Medium
- samsung mobile bixby visionImproper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14...6.2 Medium
- samsung galleryImproper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14...5.5 Medium
- samsung galleryImproper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5...7.2 High
- samsung galleryImproper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5...5.1 Medium
- samsung galleryImproper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5...4.6 Medium
- samsung bixby, samsung mobile voice wake-up +1 moreImproper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows...6.2 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows...6.6 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1...6.6 Medium
- Show moreLoading…