CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- robert peake better random redirectWordPress Better Random Redirect plugin <= 1.3.20 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- nitin yawalkar rdfa breadcrumbWordPress RDFa Breadcrumb plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- chris coyier codepen embed blockWordPress CodePen Embed Block plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- jk wp-fb-autoconnectWordPress WP-FB-AutoConnect plugin <= 4.6.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- codepeople cp pollsWordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- truong thanh atp call nowWordPress ATP Call Now plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- xootix login/signup popupWordPress Login/Signup Popup plugin <= 2.9.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- spokiWordPress Spoki plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- sparkle themes fitness parkWordPress Fitness Park theme <= 1.1.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- sparkle themes spark multipurposeWordPress Spark Multipurpose theme <= 1.0.7 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- cyrilg fyrebox quizzesWordPress Fyrebox Quizzes plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- mahmudul hasan arif enhanced blocks – page builder blocks for gutenbergWordPress Enhanced Blocks – Page Builder Blocks for Gutenberg plugin <= 1.4.1 - Broken Access Control Vulnerability6.5 Medium
- buying buddy idx crmWordPress Buying Buddy IDX CRM plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- yamna khawaja mailing group listservWordPress Mailing Group Listserv plugin <= 3.0.5 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- aviplugins.com wp register profile with shortcodeWordPress WP Register Profile With Shortcode plugin <= 3.6.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wp engine gutenberg blocks – acf blocks suiteWordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- anantaddons anant addons for elementorWordPress Anant Addons for Elementor plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rameez iqbal real estate managerWordPress Real Estate Manager plugin <= 7.3 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- jordy meow code engineWordPress Code Engine plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- stellarwp wpcompleteWordPress WPComplete plugin <= 2.9.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- prowcplugins related products manager for woocommerceWordPress Related Products Manager for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- atakan au automatically hierarchic categories in menuWordPress Automatically Hierarchic Categories in Menu plugin <= 2.0.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- webvitaly sitekitWordPress Sitekit plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- blueglass interactive ag jobs for wordpressWordPress Jobs for WordPress plugin <= 2.7.14 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- prismtechstudios modern footnotesWordPress Modern Footnotes plugin <= 1.4.19 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- adnan haque (a11n) virtual moderatorWordPress Virtual Moderator plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- chad butler wp-membersWordPress WP-Members plugin <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- beee tinynavWordPress TinyNav plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- mohammad parsa logo manager for samandehiWordPress Logo Manager For Samandehi plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- themelocation change cart button colors woocommerceWordPress Change Cart button Colors WooCommerce plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- king rayhan scroll upWordPress Scroll UP plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- george lewe lewe chordpressWordPress Lewe ChordPress plugin <= 4.0.1 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability7.1 High
- hideoguchi bluff postWordPress Bluff Post plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- devfelixmoira knowledge base – knowledge base makerWordPress Knowledge Base – Knowledge Base Maker plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- r-win wp-downloadcounterWordPress WP-DownloadCounter plugin <= 1.01 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- esselink.nu settingsWordPress Esselink.nu Settings plugin <= 4.5 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- vgstef wp user stylesheet switcherWordPress WP User Stylesheet Switcher plugin <= v2.2.0 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- aharonyan wp front user submit / front editorWordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- creative-solutions creative contact formWordPress Creative Contact Form plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- thanhtungtnt video list managerWordPress Video List Manager plugin <= 1.7 - SQL Injection Vulnerability8.5 High
- enguerranws import youtube videos as wp postsWordPress Import YouTube videos as WP Posts plugin <= 2.1 - Broken Access Control Vulnerability7.5 High
- rameez iqbal real estate managerWordPress Real Estate Manager plugin <= 7.3 - Cross Site Request Forgery (CSRF) Vulnerability8.8 High
- iqonic design wp roadmapWordPress WP Roadmap plugin <= 2.1.3 - SQL Injection vulnerability8.5 High
- anonform ab anon::form embedded secure formWordPress ANON::form embedded secure form plugin <= 1.7 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- metagauss profilegridWordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability4.3 Medium
- radiustheme classified listingWordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability7.5 High
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) Vulnerability6.4 Medium
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- ninja team file manager proWordPress File Manager Pro plugin <= 1.8.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- realmag777 huskyWordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability7.5 High
- Show moreLoading…