CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- bruno cavalcante ghostwriterWordPress ghostwriter theme <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fyrewurks tiki timeWordPress Tiki Time theme <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tijajiWordPress Tijaji theme <= 1.43 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- citeum openctiOpenCTI vulnerable to Denial of Service through web hook7.6 High
- takimi themes carzineWordPress CarZine theme <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- duwasai flashyWordPress Flashy theme <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jinwen js o3 liteWordPress Js O3 Lite theme <= 1.5.8.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- twh offset writingWordPress offset writing theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3, iOS...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA permissions issue was addressed with additional restrictions. This issue is fixed in visionOS 2...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3...3.3 Low
- phpgurukul credit card application management systemPHPGurukul Credit Card Application Management System new-ccapplication.php cross site scripting5.3 Medium
- asmedia moseterWordPress moseter theme <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fyrewurks polka dotsWordPress polka dots theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- asmedia tuaug4WordPress tuaug4 theme <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mythemes my whiteWordPress my white theme <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup7.5 High
- masteriyo - lms, themegrill masteriyo +1 moreWordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability5.3 Medium
- phpgurukul employee record management systemPHPGurukul Employee Record Management System registererms.php sql injection5.3 Medium
- oretnom23 apartment visitor management systemSourceCodester Apartment Visitor Management System profile.php sql injection6.9 Medium
- openvpn 3 linux, openvpn3linux +1 moreThe configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local...6.2 Medium
- embed360 embed and integrate etsy shopWordPress Embed and Integrate Etsy Shop plugin <= 1.0.8 - Broken Access Control vulnerability5.3 Medium
- ed4becky rootspersonaWordPress Rootspersona plugin <= 3.7.5 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- redefiningtheweb dynamic pricing & discounts lite for woocommerceWordPress Dynamic Pricing & Discounts Lite for WooCommerce plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- 10web form maker by 10webWordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- element invader elementinvader addons for elementorWordPress ElementInvader Addons for Elementor plugin <= 1.3.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- sbouey falang multilanguageWordPress Falang multilanguage plugin <= 1.3.61 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- shohei.tanaka japanized for woocommerceWordPress Japanized For WooCommerce plugin <= 2.6.40 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- majestic support supportWordPress Majestic Support plugin <= 1.1.0 - Broken Access Control Vulnerability5.3 Medium
- ruben garcia automatorwpWordPress AutomatorWP plugin <= 5.2.1.3 - SQL Injection Vulnerability7.6 High
- davidfcarr rsvpmarkerWordPress RSVPMarker plugin <= 11.5.6 - SQL Injection Vulnerability8.5 High
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.2.74 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- visual composer website builderWordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability5.3 Medium
- sktthemes skt blocksWordPress SKT Blocks plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- greg winiarski wpadvertsWordPress WPAdverts plugin <= 2.2.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- guru team bot for telegram on woocommerceWordPress Bot for Telegram on WooCommerce plugin <= 1.2.6 - Broken Access Control Vulnerability4.3 Medium
- realmag777 active products tables for woocommerceWordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- pektsekye year make model search for woocommerceWordPress Year Make Model Search for WooCommerce plugin <= 1.0.11 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- artiosmedia product code for woocommerceWordPress Product Code for WooCommerce plugin <= 1.5.0 - CSRF to Database Update vulnerability4.3 Medium
- multivendorxWordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- m.code url rewrite analyzerWordPress Url Rewrite Analyzer plugin <= 1.3.3 - Broken Access Control Vulnerability4.3 Medium
- ninja team gdpr ccpa compliance supportWordPress GDPR CCPA Compliance Support plugin <= 2.7.3 - Broken Access Control Vulnerability4.3 Medium
- juan carlos wp mapa politico españaWordPress WP Mapa Politico España plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- jetmonsters mega menu blockWordPress Mega Menu Block plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- projectopiaWordPress Projectopia plugin <= 5.1.17 - Broken Access Control Vulnerability6.5 Medium
- xylus themes import social eventsWordPress Import Social Events plugin <= 1.8.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- videowhisper broadcast live video, live streaming integration +1 moreWordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wpfactory change add to cart button text for woocommerceWordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- Show moreLoading…