CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- wpdistillery navigation tree elementorWordPress Navigation Tree Elementor plugin <= 1.0.1 - SQL Injection Vulnerability8.5 High
- themeton spareWordPress Spare <= 1.7 - PHP Object Injection Vulnerability9.8 Critical
- creativemedia elite video playerWordPress Elite Video Player plugin <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability7.1 High
- mojoomla wpgymWordPress WPGYM <= 65.0 - Local File Inclusion Vulnerability7.5 High
- ovatheme events managerWordPress Ovatheme Events Manager plugin <= 1.8.4 - Arbitrary File Upload vulnerability10.0 Critical
- valvepress rankieWordPress Rankie plugin < 1.8.2 - SQL Injection vulnerability8.5 High
- smartiolabs smart notificationWordPress Smart Notification Plugin <= 10.3 - SQL Injection vulnerability9.3 Critical
- rextheme wp vrWordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability9.9 Critical
- nasatheme nasa coreWordPress Nasa Core Plugin <= 6.4.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- mojoomla school managementWordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability7.5 High
- romancode mapsvgWordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability9.9 Critical
- wpexperts hub woocommerce partial shipmentWordPress Woocommerce Partial Shipment plugin <= 3.2 - SQL Injection Vulnerability8.5 High
- mojoomla school managementWordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability9.3 Critical
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability9.3 Critical
- michal jaworski track, analyze & optimize by wp taoWordPress Track, Analyze & Optimize by WP Tao plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- thembay fanaWordPress Fana theme <= 1.1.28 - Local File Inclusion Vulnerability8.1 High
- deepak anand wp dummy content generatorWordPress WP Dummy Content Generator plugin <= 3.4.6 - Arbitrary User Deletion vulnerability6.5 Medium
- thembay lasaWordPress Lasa theme <= 1.1 - Local File Inclusion Vulnerability8.1 High
- thembay besaWordPress Besa theme <= 2.3.8 - Local File Inclusion Vulnerability8.1 High
- thembay ruzaWordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability8.1 High
- thembay nikaWordPress Nika theme <= 1.2.8 - Local File Inclusion Vulnerability8.1 High
- thembay zotaWordPress Zota theme <= 1.3.8 - Local File Inclusion Vulnerability8.1 High
- thembay sapaWordPress Sapa theme <= 1.1.14 - Local File Inclusion Vulnerability8.1 High
- thembay haraWordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability8.1 High
- thembay maiaWordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability8.1 High
- thembay dizaWordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability8.1 High
- thembay aoraWordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability8.1 High
- coderevolution echo rss feed post generator plugin for wordpressWordPress Echo RSS Feed Post Generator Plugin for WordPress plugin <= 5.4.8.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- rustaurius ultimate reviewsWordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- crm perks integration for contact form 7 and zoho crm, biginWordPress Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.3.0 - PHP Object Injection Vulnerability9.8 Critical
- saleswonder team tobias wp2leadsWordPress WP2LEADS plugin <= 3.5.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- anh tran slim seoWordPress Slim SEO plugin <= 4.5.4 - SQL Injection Vulnerability7.6 High
- implecode ecommerce product catalogWordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability7.2 High
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability4.3 Medium
- cyberchimps responsive plusWordPress Responsive Plus plugin <= 3.2.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- meks flexible shortcodesWordPress Meks Flexible Shortcodes plugin <= 1.3.7 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- tyche softwares arconix shortcodesWordPress Arconix Shortcodes plugin <= 2.1.17 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- timur kamaev kama click counterWordPress Kama Click Counter plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- etruel wp views counterWordPress WP Views Counter plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wp codeus advanced sermonsWordPress Advanced Sermons plugin <= 3.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- motov.net ebook storeWordPress Ebook Store plugin <= 5.8008 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- aman funnelkit automationsWordPress Automation By Autonami plugin <= 3.6.0 - Open Redirection Vulnerability4.7 Medium
- helmut wandl advanced settingsWordPress Advanced Settings plugin <= 3.0.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- afs analytics analyticsWordPress AFS Analytics plugin <= 4.21 - Broken Access Control Vulnerability5.3 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability5.3 Medium
- brian mutende noptinWordPress Noptin plugin <= 3.8.7 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- if-so dynamic content personalization, unknown if-so dynamic content personalization +1 moreWordPress If-So Dynamic Content Personalization plugin <= 1.9.3.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- tychesoftwares arconix faqWordPress Arconix FAQ plugin <= 1.9.6 - Broken Access Control Vulnerability4.3 Medium
- greg winiarski wpadvertsWordPress WPAdverts plugin <= 2.2.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- metagauss profilegridWordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- Show moreLoading…