CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- wpdever cart tracking for woocommerceWordPress Cart tracking for WooCommerce plugin <= 1.0.17 - SQL Injection Vulnerability7.6 High
- add-ons.org pdf invoice builder for woocommerceWordPress PDF Invoice Builder for WooCommerce plugin <= 5.3.8 - SQL Injection Vulnerability7.6 High
- iqonic design graphinaWordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability8.1 High
- xylus themes xt event widget for social eventsWordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability7.5 High
- pewilliams ovation elementsWordPress Ovation Elements plugin <= 1.1.2 - Broken Access Control Vulnerability4.3 Medium
- gs plugins variation swatches for woocommerceWordPress GS Variation Swatches for WooCommerce plugin <= 3.0.4 - Broken Access Control Vulnerability5.4 Medium
- boldthemes bold page builderWordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- karim42 quran multilanguage text & audioWordPress Quran multilanguage Text & Audio plugin <= 2.3.23 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- lukáš hartmann seznam webmasterWordPress Seznam Webmaster plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- aweos gmbh wp lockWordPress AWEOS WP Lock plugin <= 1.4.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- robosoft robo galleryWordPress Robo Gallery plugin <= 5.0.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- syed balkhi charitableWordPress Charitable plugin <= 1.8.5.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- scott paterson easy paypal eventsWordPress Easy PayPal Events plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- scott paterson contact form 7 – paypal & stripe add-onWordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- scott paterson accept donations with paypal & stripe, wpplugin accept donations with paypal +1 moreWordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability7.1 High
- scott paterson time clockWordPress Time Clock plugin <= 1.2.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- seb wp dpe-gesWordPress WP DPE-GES plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- eli eli's related posts footer links and widgetWordPress ELI's Related Posts Footer Links and Widget plugin <= 1.2.04.20 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- fullworks display eventbrite eventsWordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability7.5 High
- ajay top 10WordPress Top 10 plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ruben garcia gamipressWordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability7.5 High
- ajay better searchWordPress Better Search plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ajay contextual related postsWordPress Contextual Related Posts plugin <= 4.0.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- prowcplugins product time countdown for woocommerceWordPress Product Time Countdown for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpfactory custom checkout fields for woocommerceWordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpo-hr ngg smart image searchWordPress NGG Smart Image Search plugin <= 3.3.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- nick mollie formsWordPress Mollie Forms plugin <= 2.7.12 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- code atlantic content controlWordPress Content Control plugin <= 2.6.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- jeff starr simple blog statsWordPress Simple Blog Stats plugin <= 20250416 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability7.5 High
- themepoints logo showcaseWordPress Logo Showcase plugin <= 3.0.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- publishpress authorsWordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability7.5 High
- blockspareWordPress Blockspare plugin <= 3.2.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ashan perera eventonWordPress EventON plugin <= 2.4.1 - Local File Inclusion Vulnerability7.5 High
- ultimate blocks blocksWordPress Ultimate Blocks plugin <= 3.2.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- a wp life contact form widgetWordPress Contact Form Widget plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) Vulnerability7.4 High
- rustaurius ultimate wp mailWordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability8.5 High
- markkinchin beds24 online bookingWordPress Beds24 Online Booking plugin <= 2.0.29 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- boldthemes bold page builderWordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- cyberchimps responsive plusWordPress Gutenberg & Elementor Templates Importer For Responsive plugin <= 3.1.9 - Broken Access Control Vulnerability5.3 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.1.22 - Broken Access Control Vulnerability5.3 Medium
- oliver campion display remote posts blockWordPress Display Remote Posts Block plugin <= 1.1.0 - Server Side Request Forgery (SSRF) Vulnerability6.4 Medium
- iulia cazan easy replace imageWordPress Easy Replace Image plugin <= 3.5.0 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- sonalsinha21 skt skill barWordPress SKT Skill Bar plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- gs plugins testimonial sliderWordPress GS Testimonial Slider plugin <= 3.2.9 - Content Injection vulnerability5.3 Medium
- iqonic design graphinaWordPress Graphina plugin <= 3.0.4 - Broken Access Control Vulnerability5.4 Medium
- add-ons.org cost calculator for elementorWordPress Cost Calculator for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- artbees jupiterx coreWordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- pimwick pw woocommerce bulk editWordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- codepeople music player for woocommerceWordPress Music Player for WooCommerce plugin <= 1.5.1 - Broken Access Control Vulnerability5.4 Medium
- Show moreLoading…