CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- coderevolution crawlomatic multisite scraper post generatorWordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerability5.3 Medium
- coderevolution crawlomatic multisite scraper post generatorWordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control Vulnerability4.3 Medium
- cozmoslabs profile builderWordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability4.3 Medium
- codepeople calculated fields formWordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- add-ons.org pdf for wpformsWordPress PDF for WPForms plugin <= 5.5.0 - Broken Access Control Vulnerability5.0 Medium
- rustaurius ultimate wp mailWordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability8.8 High
- webtoffee product feed for woocommerceWordPress Product Feed for WooCommerce plugin <= 2.2.8 - Broken Access Control Vulnerability4.3 Medium
- wp table builder table builderWordPress WP Table Builder plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wp legal pages cookie notice for gdpr, ccpa & eprivacy consentWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wp-buy wp maintenance mode & site under constructionWordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- matthias nordwig anti-spam, spam protection, recaptcha for all forms and gdpr-compliantWordPress Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- bill minozzi wp toolsWordPress WP Tools plugin <= 5.24 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- sergiotrinity trinity audioWordPress Trinity Audio plugin <= 5.20.0 - Broken Access Control Vulnerability4.3 Medium
- mario peshev wp-crm systemWordPress WP-CRM System plugin <= 3.4.2 - Broken Access Control Vulnerability5.3 Medium
- anton vanyukov market exporterWordPress Market Exporter plugin <= 2.0.22 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- soft8soft llc verge3dWordPress Verge3D plugin <= 4.9.4 - Broken Access Control Vulnerability5.3 Medium
- wcvendors wc vendors marketplaceWordPress WC Vendors Marketplace plugin <= 2.5.6 - SQL Injection Vulnerability7.6 High
- shaonsina sina extension for elementorWordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerability7.6 High
- cmoreira team showcaseWordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerability4.3 Medium
- cmoreira team showcaseWordPress Team Showcase plugin < 25.05.13 - Broken Access Control Vulnerability4.3 Medium
- cmoreira testimonials showcaseWordPress Testimonials Showcase plugin <= 1.9.16 - Broken Access Control Vulnerability4.3 Medium
- vova shortcodes ultimateWordPress Shortcodes Ultimate plugin <= 7.3.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- sevenspark shiftnav – responsive mobile menuWordPress ShiftNav – Responsive Mobile Menu plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- sevenspark bellows accordion menuWordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- bobbingwide oikWordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability5.3 Medium
- nk docspressWordPress DocsPress plugin <= 2.5.2 - Broken Access Control Vulnerability4.3 Medium
- tychesoftwares print invoice & delivery notes for woocommerceWordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.5.0 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- everestthemes everest backupWordPress Everest Backup plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- poeditorWordPress POEditor plugin <= 0.9.10 - CSRF to Arbitrary File Deletion vulnerability7.4 High
- raychatWordPress Raychat plugin <= 2.1.0 - Broken Access Control Vulnerability5.3 Medium
- rometheme rtmkitWordPress RTMKit Addons for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- code-projects laundry system, simple laundry system +1 morecode-projects Laundry System edit_laundry.php cross site scripting5.1 Medium
- code-projects laundry system, simple laundry system +1 morecode-projects Laundry System insert_laundry.php cross site scripting5.1 Medium
- ancorathemes mr. murphyWordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection Vulnerability9.8 Critical
- axiomthemes sweet dessertWordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability9.8 Critical
- tenda cp3, cp3 firmware +1 moreTenda CP3 apollo sub_F3C8C command injection5.1 Medium
- code-projects patient record management systemcode-projects Patient Record Management System view_hematology.php sql injection5.3 Medium
- ziv idf and zlfUncontrolled resource consumption vulnerability in IDF and ZLF8.3 High
- ziv idf and zlfStored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF4.8 Medium
- ziv idf and zlfCORS vulnerability in IDF and ZLF5.1 Medium
- ziv idf and zlfCode injection vulnerability in IDF and ZLF5.1 Medium
- ziv idf and zlfStored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF5.1 Medium
- daman jeet real time validation for gravity formsWordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ziv idf and zlfCORS vulnerability in IDF and ZLF5.3 Medium
- teastudio.pl wp posts carouselWordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability8.8 High
- ziv idf and zlfCode injection vulnerability in IDF and ZLF5.3 Medium
- themegoods photographyWordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability8.5 High
- ziv idf and zlfUncontrolled resource consumption vulnerability in IDF and ZLF8.7 High
- stylemixthemes motors - eventsWordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability9.0 Critical
- cyberchimps responsive plusWordPress Responsive Plus plugin <= 3.2.0 - Broken Access Control vulnerability5.4 Medium
- Show moreLoading…