CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- quantumcloud chatbotWordPress ChatBot plugin <= 6.7.3 - Broken Access Control Vulnerability4.3 Medium
- ht plugins slider for elementor, htplugins ht slider for elementor +1 moreWordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- cookiebotWordPress Cookiebot plugin <= 4.5.8 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- burst statistics b.v. statisticsWordPress Burst Statistics plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- sfturing hosp ordersfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection5.3 Medium
- lycheeorg lycheeLychee has Server-Side Request Forgery (SSRF) in Photo::fromUrl API via unvalidated remote image URLs3.0 Low
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- sfturing hosp ordersfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection5.3 Medium
- No product listedNet::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses6.5 Medium
- intelbras incontrol, incontrol web +1 moreIntelbras InControl HTTP PUT Request operador permission5.3 Medium
- robmarsh image shadowWordPress Image Shadow plugin <= 1.1.0 - Arbitrary File Deletion Vulnerability7.7 High
- mojoomla wpcrm - crm for contact form cf7 & woocommerceWordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bzotheme zennyWordPress Zenny theme <= 1.7.5 - Local File Inclusion Vulnerability8.1 High
- fasterthemes fastbookWordPress FastBook plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- convers lab wp smartpayWordPress WP SmartPay plugin <= 2.7.13 - Account Takeover vulnerability8.8 High
- thhake photo express for googleWordPress Photo Express for Google plugin <= 0.3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- snstheme mbstore - digital woocommerce wordpress themeWordPress MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Local File Inclusion Vulnerability8.1 High
- bzotheme printxtoreWordPress PrintXtore theme < 1.7.8 - Local File Inclusion vulnerability8.1 High
- regibaer evangelische termineWordPress Evangelische Termine plugin <= 3.3 - Cross Site Scripting (XSS) Vulnerability7.1 High
- wphobby backwpWordPress Backwp plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pep.vn wp optimize by xtrafficWordPress WP Optimize By xTraffic plugin <= 5.1.6 - PHP Object Injection Vulnerability9.8 Critical
- snstheme sns vickyWordPress SNS Vicky theme <= 3.7 - Local File Inclusion Vulnerability8.1 High
- aharonyan wp front user submit / front editorWordPress WP Front User Submit / Front Editor plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jose content no cacheWordPress Content No Cache plugin <= 0.1.4 - Arbitrary Function Call vulnerability8.6 High
- iamapinan woocommerce line notifyWordPress Woocommerce Line Notify plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability7.1 High
- serpednet serped.netWordPress SERPed.net plugin <= 4.6 - Local File Inclusion Vulnerability8.1 High
- themeton seven starsWordPress Seven Stars theme <= 1.4.4 - Cross Site Scripting (XSS) Vulnerability7.1 High
- thembay pucaWordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability8.1 High
- buddhathemes hydroWordPress HYDRO theme <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- case-themes ctusersWordPress CTUsers plugin <= 1.0.0 - Local File Inclusion Vulnerability7.5 High
- darkmysiteWordPress DarkMySite plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- smartiolabs smart notificationWordPress Smart Notification Plugin <= 10.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- thememove amelyWordPress Amely theme <= 3.1.4 - SQL Injection vulnerability9.3 Critical
- sneeit magoneWordPress MagOne theme <= 8.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- adrian tobey formlift for infusionsoft web formsWordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mojoomla school managementWordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- arraytics eventinWordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability7.1 High
- jory hogeveen off-canvas sidebars & menus (slidebars)WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- thembay greenmartWordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability8.1 High
- webgeniuslab zikzag coreWordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability8.1 High
- codedropz drag and drop multiple file upload (pro) - woocommerceWordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability10.0 Critical
- flexostudio flexo counterWordPress Flexo Counter plugin <= 1.0001 - Cross Site Scripting (XSS) Vulnerability7.1 High
- chrisbadgett lifterlmsWordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability9.3 Critical
- codesupplyco networkerWordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability8.1 High
- joinwebs classieraWordPress Classiera theme <= 4.0.34 - SQL Injection Vulnerability9.3 Critical
- pebas couponxxlWordPress CouponXxL theme <= 3.0.0 - PHP Object Injection Vulnerability9.8 Critical
- boldthemes amwerkWordPress Amwerk theme <= 1.2.0 - PHP Object Injection Vulnerability9.8 Critical
- pebas couponxxl custom post typesWordPress CouponXxL Custom Post Types plugin <= 3.0 - Privilege Escalation Vulnerability8.6 High
- thembay dizaWordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability8.1 High
- quanticalabs css3 vertical web pricing tablesWordPress CSS3 Vertical Web Pricing Tables plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability7.1 High
- Show moreLoading…