CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- wphobby backwpWordPress Backwp plugin <= 2.0.2 - CSRF to Arbitrary File Deletion vulnerability7.4 High
- jonathan lau cubepointsWordPress CubePoints plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- mangup personal faviconWordPress Personal Favicon plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1 High
- vadim bogaiskov bg orthodox calendarWordPress Bg Orthodox Calendar plugin <= 0.13.10 - CSRF to Stored XSS vulnerability7.1 High
- mail250 free wp mail smtpWordPress Free WP Mail SMTP plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- dilemma123 recent posts slider responsiveWordPress Recent Posts Slider Responsive plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- storepro subscription renewal reminders for woocommerceWordPress Subscription Renewal Reminders for WooCommerce plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- soli wp mail optionsWordPress WP Mail Options plugin <= 0.2.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- arildur read more loginWordPress Read More Login plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- webaholicson epicwin pluginWordPress Epicwin Plugin plugin <= 1.5 - CSRF to SQL Injection vulnerability8.2 High
- elastic email subscribe formWordPress Elastic Email Subscribe Form plugin <= 1.2.2 - Broken Access Control Vulnerability5.4 Medium
- viralloops viral loops wp integrationWordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerability5.3 Medium
- viralloops viral loops wp integrationWordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerability4.3 Medium
- exeideas international wp autokeywordWordPress WP AutoKeyword plugin <= 1.0 - Broken Access Control Vulnerability5.3 Medium
- thad allender gpp slideshowWordPress GPP Slideshow plugin <= 1.3.5 - Broken Access Control Vulnerability4.3 Medium
- weblizar - wordpress themes & plugin hr management liteWordPress HR Management Lite plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- mva7 the holiday calendarWordPress The Holiday Calendar plugin <= 1.18.2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- shawonpro socialmarkWordPress SocialMark plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- centangle direct checkout for woocommerce liteWordPress Direct Checkout for WooCommerce Lite plugin <= 1.0.3 - Broken Access Control Vulnerability5.3 Medium
- faaiq custom category/post type post orderWordPress Custom Category/Post Type Post order plugin <= 1.6.0 - Broken Access Control Vulnerability5.4 Medium
- chr designer youtube simple galleryWordPress YouTube Simple Gallery plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- eleopard behance portfolio managerWordPress Behance Portfolio Manager plugin <= 1.7.5 - Broken Access Control vulnerability4.3 Medium
- matt pramschufer appbannersWordPress AppBanners plugin <= 1.5.14 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- wordliftWordPress WordLift plugin <= 3.54.4 - Broken Access Control Vulnerability4.3 Medium
- codehaveli bitly url shortenerWordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- regolithsjk elegant visitor counterWordPress Elegant Visitor Counter plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- pozzad global translatorWordPress Global Translator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- pozzad global translatorWordPress Global Translator plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- ability, inc accessibility suiteWordPress Accessibility Suite plugin <= 4.19 - Broken Access Control Vulnerability5.4 Medium
- iwebix wp featured content sliderWordPress WP Featured Content Slider plugin <= 2.6 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- powiet powie's uptime robotWordPress Powie's Uptime Robot plugin <= 0.9.7 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- deetronix booking ultra proWordPress Booking Ultra Pro plugin <= 1.1.20 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- unreal themes acf: yandex maps fieldWordPress ACF: Yandex Maps Field plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- vicchi wp biographiaWordPress WP Biographia plugin <= 4.0.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- wordapp team wordappWordPress Wordapp plugin <= 1.7.0 - Broken Access Control Vulnerability4.3 Medium
- wp compress for mainwpWordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control Vulnerability5.4 Medium
- shamil shafeev «подсказки» от dadata.ruWordPress «Подсказки» от DaData.ru plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- nickduncan contact formWordPress Contact Form plugin <= 2.0.12 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- olivesystem 診断ジェネレータ作成プラグインWordPress 診断ジェネレータ作成プラグイン plugin <= 1.4.16 - Broken Access Control Vulnerability5.3 Medium
- broadly for wordpressWordPress Broadly for WordPress plugin <= 3.0.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- stefanledin responsify wpWordPress Responsify WP plugin <= 1.9.11 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- melipayamakWordPress Melipayamak plugin <= 2.2.12 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- debashish iframe widgetWordPress IFrame Widget plugin <= 4.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- otwthemes post custom templates liteWordPress Post Custom Templates Lite plugin <= 1.14 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- marvie pons pinterest verify meta tagWordPress Pinterest Verify Meta Tag plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- michael cannon custom bulk/quick editWordPress Custom Bulk/Quick Edit plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- taskbuilderWordPress Taskbuilder plugin <= 4.0.7 - Broken Access Control Vulnerability5.3 Medium
- giraphix creative layouts for elementorWordPress Layouts for Elementor plugin <= 1.11 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wpdive nexa blocksWordPress Nexa Blocks plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- stiofan blockstrap page builder - bootstrap blocksWordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- Show moreLoading…