CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- formsintegrations integrations of zoho crm with elementor formWordPress Integrations of Zoho CRM with Elementor form plugin <= 1.0.8 - Open Redirection Vulnerability4.7 Medium
- elextensions elex product feed for woocommerceWordPress ELEX Product Feed for WooCommerce <= 3.1.2 - SQL Injection Vulnerability7.6 High
- supertext translation and proofreadingWordPress Supertext Translation and Proofreading plugin <= 4.26 - CSRF to Stored XSS vulnerability7.1 High
- sarvesh m rao wp discord inviteWordPress WP Discord Invite plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- fernando briano list category postsWordPress List category posts plugin <= 0.91.0 - Local File Inclusion Vulnerability7.5 High
- webinarpressWordPress WebinarPress plugin <= 1.33.28 - Server Side Request Forgery (SSRF) Vulnerability5.5 Medium
- awin – advertiser tracking for woocommerce, - advertiser tracking for woocommerce +1 moreWordPress Awin – Advertiser Tracking for WooCommerce plugin <= 2.0.0 - CSRF to Product Feed Regeneration vulnerability4.3 Medium
- raihancse awesome galleryWordPress Awesome Gallery plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- connekthq ajax load moreWordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- mario peshev wp-crm system, wp-crm system +1 moreWordPress WP-CRM System plugin <= 3.4.5 - PHP Object Injection vulnerability7.2 High
- quomodosoft qs dark modeWordPress QS Dark Mode plugin <= 3.0 - Broken Access Control Vulnerability5.4 Medium
- apasionados submission dom tracking for contact form 7WordPress Submission DOM tracking for Contact Form 7 plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- apasionados dofollow case by caseWordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- apasionados dofollow case by caseWordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- scott paterson easy paypal buy now button, wpplugin easy paypal \& stripe buy now button +1 moreWordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- apasionados email notification on loginWordPress Email Notification on Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- meks flexible shortcodesWordPress Meks Flexible Shortcodes plugin <= 1.3.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- bundgaard martins free monetized ad exchange networkWordPress Martins Free Monetized Ad Exchange Network plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- aharonyan wp front user submit / front editorWordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- kodezen llc ablocksWordPress aBlocks plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- flowdee amazon product in a postWordPress Amazon Product in a Post plugin <= 5.2.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- chris clark lessbuttons social sharing and statisticsWordPress LessButtons Social Sharing and Statistics plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- clickwhaleWordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability5.4 Medium
- easymebiz easyme connectWordPress EasyMe Connect plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- appjetty show all commentsWordPress Show All Comments plugin <= 7.0.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- igor benic simple giveawaysWordPress Simple Giveaways plugin <= 2.49.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- appjetty wp jquery datatableWordPress WP jQuery DataTable plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- data443 risk migitation, inc. inline related postsWordPress Inline Related Posts plugin <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ammarahmad786 calculate prices based on distance for woocommerceWordPress Calculate Prices based on Distance For WooCommerce plugin <= 1.3.5 - Broken Access Control vulnerability5.4 Medium
- maulik vora wp podcasts managerWordPress WP Podcasts Manager plugin <= 1.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- syed balkhi beacon lead magnets and lead captureWordPress Beacon Lead Magnets and Lead Capture plugin <= 1.5.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- darshan saroya color your barWordPress Color Your Bar plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- daext soccer live scoresWordPress Soccer Live Scores <= 1.0.5 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- jonas hjalmarsson really simple under construction pageWordPress Really Simple Under Construction Page plugin <= 1.4.6 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- árpád lehel mátyus terms popup on user loginWordPress Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL plugin <= 2.0.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- creedally bulk featured imageWordPress Bulk Featured Image plugin <= 1.2.4 - Broken Access Control vulnerability4.3 Medium
- jextensions store wpspeedWordPress WPSpeed plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- motov.net ebook storeWordPress Ebook Store plugin <= 5.8009 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- yaycommerce yaysmtpWordPress YaySMTP plugin <= 2.6.4 - SQL Injection Vulnerability7.6 High
- ctltwp wiki embedWordPress Wiki Embed plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- themefic instantioWordPress Instantio plugin <= 3.3.16 - Arbitrary File Upload Vulnerability6.6 Medium
- binsaifullah beaf, themefic ultimate before after image slider \& gallery +1 moreWordPress BEAF plugin <= 4.6.10 - Arbitrary File Upload Vulnerability9.1 Critical
- varun dubey wbcom designs - activity link preview for buddypress, wbcomdesigns activity link preview for buddypress +1 moreWordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability5.4 Medium
- sendpulse email marketing newsletterWordPress SendPulse Email Marketing Newsletter plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- aresit wp compressWordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- ays pro poll makerWordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability5.3 Medium
- acowebs dynamic pricing with discount rules for woocommerceWordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability7.6 High
- themetechmount truebookerWordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- michael simple calendar for elementorWordPress Simple calendar for Elementor plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wedevs wemailWordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability5.3 Medium
- Show moreLoading…