CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- wpfactory free shipping bar: amount left for free shipping for woocommerce, free shipping bar +1 moreWordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpfactory back button widgetWordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpfactory additional custom emails & recipients for woocommerceWordPress Additional Custom Emails & Recipients for WooCommerce plugin <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpfactory coupons & add to cart by url links for woocommerceWordPress Coupons & Add to Cart by URL Links for WooCommerce plugin <= 1.7.7 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpfactory ean for woocommerceWordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpfactory sitewide discount for woocommerce: apply discount to all productsWordPress Sitewide Discount for WooCommerce: Apply Discount to All Products plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- blair williams shortlinks by pretty linksWordPress Shortlinks by Pretty Links plugin <= 3.6.15 - Broken Access Control Vulnerability4.3 Medium
- stellarwp the events calendarWordPress The Events Calendar plugin <= 6.11.2.1 - Broken Access Control Vulnerability5.4 Medium
- tim strifler exclusive addons elementorWordPress Exclusive Addons Elementor plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- bill minozzi recaptcha for allWordPress reCAPTCHA for all plugin <= 2.26 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wpwax legal pagesWordPress Legal Pages plugin <= 1.4.5 - Broken Access Control Vulnerability6.5 Medium
- wpfactory cost of goods for woocommerceWordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpfactory product notes tab & private admin notes for woocommerceWordPress Product Notes Tab & Private Admin Notes for WooCommerce plugin <= 3.1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- awcode toolkitWordPress AWcode Toolkit plugin <= 1.0.18 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- wpfactory wishlist for woocommerceWordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- bunny.netWordPress bunny.net plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability8.5 High
- bogdan bendziukov wp image maskWordPress WP Image Mask plugin <= 3.1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ultimate blocks blocksWordPress Ultimate Blocks plugin <= 3.3.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- affmngr affiliates manager google recaptcha integrationWordPress Affiliates Manager Google reCAPTCHA Integration plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- xpro addons for beaver builder – liteWordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- projectworlds online food ordering systemprojectworlds Online Food Ordering System admin-page.php sql injection6.9 Medium
brlttySUSESecurity update for brlttyNo scorebrlttyopenSUSESecurity update for brlttyNo score- oretnom23 stock management systemSourceCodester Stock Management System changePassword.php sql injection6.9 Medium
- phpgurukul user registration & login and user management system, user registration \& login and user management system +1 morePHPGurukul User Registration & Login and User Management System edit-profile.php sql injection6.9 Medium
- ponaravindb hospital-management-system, hospital management system +1 moreponaravindb Hospital-Management-System doctor-panel.php sql injection5.3 Medium
brlttySUSESecurity update for brlttyNo score- projectworlds online lawyer management systemprojectworlds Online Lawyer Management System lawyer_registation.php sql injection6.9 Medium
- projectworlds online lawyer management systemprojectworlds Online Lawyer Management System user_registation.php sql injection6.9 Medium
- campcodes online shopping portalCampcodes Online Shopping Portal my-cart.php sql injection6.9 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- campcodes online shopping portalCampcodes Online Shopping Portal my-account.php sql injection6.9 Medium
- projectsworld online lawyer management systemprojectworlds Online Lawyer Management System save_lawyer_edit_profile.php sql injection6.9 Medium
- phpgurukul online marriage registration systemPHPGurukul Online Marriage Registration System between-dates-application-report.php sql injection6.9 Medium
- phpgurukul car rental project, car rental portal +1 morePHPGurukul Car Rental Project post-avehical.php unrestricted upload5.1 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System expense-monthwise-reports-detailed.php sql injection6.9 Medium
- lerouxyxchire client database management systemSourceCodester Client Database Management System user_void_transaction.php sql injection6.9 Medium
- appleple a-blog cmsPath traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions...5.1 Medium
- appleple a-blog cmsCross-site scripting vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and prior...4.8 Medium
- appleple a-blog cmsServer-side request forgery vulnerability exists in a-blog cms multiple versions. If this...9.2 Critical
- appleple a-blog cmsa-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with...2.1 Low
- lerouxyxchire client database management systemSourceCodester Client Database Management System user_delivery_update.php unrestricted upload6.9 Medium
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6MemInIF...8.4 High
- fuji electric co., ltd. s-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6ComFile...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6File...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6MemInIF.dll...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CGamenDataRom...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CDrawSLine:...8.4 High
- Show moreLoading…