CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- wp wham all currencies for woocommerceWordPress All Currencies for WooCommerce plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crm perks wp gravity forms constant contact pluginWordPress WP Gravity Forms Constant Contact Plugin <= 1.1.0 - Open Redirection Vulnerability4.7 Medium
- crm perks wp gravity forms salesforceWordPress WP Gravity Forms Salesforce plugin <= 1.4.7 - Open Redirection Vulnerability4.7 Medium
- buddydev activity plus reloaded for buddypressWordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control Vulnerability5.4 Medium
- booqable rental software rentalWordPress Booqable Rental plugin <= 2.4.25 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jokerbr313 advanced post listWordPress Advanced Post List plugin <= 0.5.6.2 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- onoffice gmbh for wp-websites, onofficeweb onoffice for wp-websites +1 moreWordPress onOffice for WP-Websites plugin <= 6.5.1 - Broken Access Control vulnerability5.4 Medium
- wpdive nexa blocksWordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- addonmaster post grid masterWordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerability4.3 Medium
- dor zuberi slack notifications by dorzkiWordPress Slack Notifications by dorzki plugin <= 2.0.7 - Broken Access Control Vulnerability4.3 Medium
- chaport live chat chaportWordPress Chaport <= 1.1.6 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- tggfref wp-recallWordPress WP-Recall plugin <= 16.26.14 - CSRF to Privilege Escalation vulnerability6.3 Medium
- alessandro piconi simple keyword to linkWordPress Simple Keyword to Link plugin <= 1.5 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- renzo tejada libro de reclamaciones y quejasWordPress Libro de Reclamaciones y Quejas plugin <= 0.9 - SQL Injection Vulnerability7.6 High
- creativemedia elite video playerWordPress Elite Video Player plugin <= 10.0.5 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- shahjada wpdm – premium packagesWordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- themehunk, themehunk mega menu +1 moreWordPress ThemeHunk plugin <= 1.2.0 - Broken Access Control vulnerability4.3 Medium
- emraan cheema cubewpWordPress CubeWP plugin <= 1.1.29 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- otwthemes widgetize pages lightWordPress Widgetize Pages Light plugin <= 3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- smartdatasoft car repair servicesWordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) Vulnerability5.4 Medium
- miguel fuentes payment qr woocommerceWordPress Payment QR WooCommerce plugin <= 1.1.6 - Broken Access Control Vulnerability5.3 Medium
- fahad mahmood external store for shopifyWordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability7.5 High
- wp.insider simple membershipWordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- blocksera image hover effects blockWordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- agile logix store locator wordpressWordPress Store Locator WordPress plugin <= 1.5.2 - Arbitrary File Upload Vulnerability6.6 Medium
- agile logix store locator wordpressWordPress Store Locator WordPress plugin <= 1.5.1 - SQL Injection Vulnerability7.6 High
- ruben garcia shortlinks proWordPress ShortLinks Pro plugin <= 1.0.7 - SQL Injection Vulnerability7.6 High
- ruben garcia gamipressWordPress GamiPress plugin <= 7.4.5 - SQL Injection Vulnerability7.6 High
- automattic newspack newslettersWordPress Newspack Newsletters plugin <= 3.13.0 - Open Redirection Vulnerability4.7 Medium
- pickplugins job board managerWordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability5.3 Medium
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.10 - SQL Injection Vulnerability8.5 High
- seedprod 404 page by seedprodWordPress 404 Page by SeedProd < 1.0.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- fraudlabspro fraudlabs pro for woocommerceWordPress FraudLabs Pro for WooCommerce plugin <= 2.22.11 - Broken Access Control Vulnerability5.3 Medium
- wptouchWordPress WPtouch plugin <= 4.3.60 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- ntc wp page loadingWordPress WP Page Loading plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- persianscript persian woocommerce smsWordPress Persian Woocommerce SMS plugin <= 7.0.10 - SQL Injection Vulnerability7.6 High
- ovatheme brwWordPress BRW plugin <= 1.8.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ovatheme brwWordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability7.5 High
- coolhappy the events calendar countdown addonWordPress The Events Calendar Countdown Addon plugin <= 1.4.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- m a vinoth kumar frontend dashboardWordPress Frontend Dashboard plugin <= 2.2.8 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ht plugins team memberWordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wp travel engine travel engineWordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerability7.5 High
- magazine3 wp multilangWordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion Vulnerability7.5 High
- catchsquare wp social widgetWordPress WP Social Widget plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- implecode product catalog simpleWordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- codemanas search with typesenseWordPress Search with Typesense plugin <= 2.0.10 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpsoul greenshiftWordPress Greenshift plugin <= 11.5.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wplugged.com webhotelierWordPress WebHotelier plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- bastien ho event postWordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- Show moreLoading…