CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- red hat openshift ai (rhoai), openshift ai 2.16 +1 moreTrustyai-explainability: command injection via lmevaljob cr5.9 Medium
- code-projects responsive blog, fabian responsive blog site +1 morecode-projects Responsive Blog pageViewMembers.php cross site scripting4.8 Medium
- dnnsoftware dnn.platform, dotnetnuke +1 moreDNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input8.6 High
- dnnsoftware dnn.platform, dotnetnuke +1 moreDNN.PLATFORM possibly allows bypass of IP Filters8.8 High
- nasatheme elessiWordPress Elessi theme <= 6.3.9 - Cross Site Scripting (XSS) Vulnerability7.1 High
- indgeek cliplinkWordPress ClipLink plugin <= 1.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- oganro travel portal search widget for hotelbeds apitude apiWordPress Oganro Travel Portal Search Widget for HotelBeds APITUDE API plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- oganro pixelbeds channel manager and hotel booking engineWordPress PixelBeds Channel Manager and Hotel Booking Engine plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- oganro xml travel portal widgetWordPress XML Travel Portal Widget plugin <= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- marcusjansen live sports streamthunderWordPress Live Sports Streamthunder plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- zara 4 image compressionWordPress Zara 4 Image Compression plugin <= 1.2.17.2 - Broken Access Control Vulnerability4.3 Medium
- sparklewpthemes hello fse blogWordPress Hello FSE Blog theme <= 1.0.6 - Broken Access Control Vulnerability4.3 Medium
- athemeart translations eds responsive menuWordPress eDS Responsive Menu plugin <= 1.2 - Broken Access Control Vulnerability4.3 Medium
- grandplugins image sizes controller, create custom image sizes, disable image sizesWordPress Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes plugin <= 1.0.10 - Broken Access Control Vulnerability4.3 Medium
- david wood tm replace howdyWordPress TM Replace Howdy plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- upstreamplugin upstream: a project management plugin for wordpressWordPress UpStream: a Project Management Plugin for WordPress plugin <= 2.1.1 - Broken Access Control Vulnerability4.3 Medium
- wanotifier notifierWordPress WANotifier plugin <= 2.7.12 - Broken Access Control vulnerability4.3 Medium
- hossni mubarak jobwpWordPress JobWP plugin <= 2.4.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- eyecix jobsearchWordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerability4.3 Medium
- wp inventory managerWordPress WP Inventory Manager plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wp event manager user profile avatarWordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control Vulnerability4.3 Medium
- slui media hygieneWordPress Media Hygiene plugin <= 4.0.1 - Broken Access Control vulnerability4.3 Medium
- aguilatechnologies wp customer areaWordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability4.3 Medium
- mahabub81 user roles and capabilitiesWordPress User Roles and Capabilities plugin <= 1.2.6 - Broken Access Control Vulnerability4.3 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- joe hoyle wpthumbWordPress WPThumb plugin <= 0.10 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- thanhtungtnt video list managerWordPress Video List Manager plugin <= 1.7 - Broken Access Control Vulnerability5.3 Medium
- ali irani auto upload imagesWordPress Auto Upload Images plugin <= 3.3.2 - Server Side Request Forgery (SSRF) Vulnerability4.9 Medium
- renzo johnson contact form 7 aweber extensionWordPress Contact Form 7 AWeber Extension plugin <= 0.1.40 - Broken Access Control vulnerability5.3 Medium
- wpfactory crm erp business solutionWordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control Vulnerability5.3 Medium
- contentstudioWordPress ContentStudio plugin <= 1.3.7 - Broken Access Control vulnerability5.3 Medium
- app cheap builderWordPress App Builder plugin <= 5.5.6 - Broken Access Control vulnerability5.3 Medium
- cookie script cookie-script.comWordPress Cookie-Script.com plugin <= 1.2.1 - Broken Access Control Vulnerability5.3 Medium
- tggfref wp-recallWordPress WP-Recall plugin <= 16.26.14 - Broken Access Control Vulnerability5.3 Medium
- osama.esh wp visitor statistics (real time traffic)WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.4 - Broken Access Control vulnerability5.3 Medium
- dfactory download attachmentsWordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- wetail woocommerce fortnox integrationWordPress WooCommerce Fortnox Integration plugin <= 4.5.5 - Broken Access Control Vulnerability5.4 Medium
- syed balkhi giveaways and contests by rafflepressWordPress Giveaways and Contests by RafflePress plugin <= 1.12.18 - Broken Access Control + CSRF Vulnerability5.3 Medium
- climax themes kata plusWordPress Kata Plus plugin <= 1.5.3 - Broken Access Control Vulnerability5.4 Medium
- cscode woocommerce manager – customize and control cart page, add to cart button, checkout fields easilyWordPress WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily plugin <= 1.2.4.5 - Broken Access Control Vulnerability5.4 Medium
- félix martínez recipes manager - wphWordPress plugin Recipes manager - WPH <=1.0.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- zapier for wordpressWordPress Zapier for WordPress plugin <= 1.5.2 - Broken Access Control Vulnerability5.4 Medium
- jason judge csv importer improvedWordPress CSV Importer Improved plugin <= 0.6.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- fridaysystems inventory presserWordPress Inventory Presser plugin <= 15.2.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- rodrigo bastos hand talkWordPress Hand Talk plugin <= 6.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- iamapinan pdpa consent for thailandWordPress PDPA Consent for Thailand plugin <= 1.1.1 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- brijeshk89 ip based loginWordPress IP Based Login plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- sandor kovacs simple sticky footerWordPress Simple Sticky Footer plugin <= 1.3.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- tealiumWordPress Tealium plugin <= 2.1.20 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- matt wp voting contestWordPress WP Voting Contest plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- Show moreLoading…