CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- lucidcrew wp forum serverWordPress WP Forum Server plugin <= 1.8.2 - SQL Injection Vulnerability7.6 High
- lucidcrew wp forum serverWordPress WP Forum Server plugin <= 1.8.2 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- rohil contact form – 7 : hide success messageWordPress Contact Form – 7 : Hide Success Message plugin <= 1.1.4 - Broken Access Control Vulnerability5.3 Medium
- theme junkie team contentWordPress Theme Junkie Team Content plugin <= 0.1.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- douglaskarr podcast feed player widget and shortcodeWordPress Podcast Feed Player Widget and Shortcode plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- gioni plugin inspectorWordPress Plugin Inspector plugin <= 1.5 - Arbitrary File Download Vulnerability4.9 Medium
- ecoal95 ec stars ratingWordPress EC Stars Rating plugin <= 1.0.11 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- icount payment gatewayWordPress iCount Payment Gateway plugin <= 2.0.7 - Broken Access Control Vulnerability5.3 Medium
- smart agenda agendaWordPress Smart Agenda plugin <= 4.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- morten dalgaard johansen dashboard widget sidebarWordPress Dashboard Widget Sidebar plugin <= 1.2.3 - Broken Access Control Vulnerability4.3 Medium
- samsk wp datatableWordPress WP DataTable plugin <= 0.2.7 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ms wp visual sitemapWordPress WP Visual Sitemap plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- adrian ladó plationline paymentsWordPress PlatiOnline Payments plugin <= 7.0.0 - Broken Access Control vulnerability4.3 Medium
- robert cummings quick faviconWordPress Quick Favicon plugin <= 0.22.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- the website flip add & replace affiliate links for amazonWordPress Add & Replace Affiliate Links for Amazon plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- pankaj.sakaria cms blocksWordPress CMS Blocks plugin <= 1.1 - Broken Access Control Vulnerability6.5 Medium
- aviplugins.com thumbnail editorWordPress Thumbnail Editor plugin <= 2.3.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpbean wpb category slider for woocommerceWordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability7.5 High
- antoineh football poolWordPress Football Pool plugin <= 2.12.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- aman popup addon for ninja formsWordPress Popup addon for Ninja Forms plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpeka wp adcenterWordPress WP AdCenter plugin <= 2.6.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- infigo software is-theme-companionWordPress IS-theme-companion plugin <= 1.59 - Cross Site Request Forgery (CSRF) vulnerability8.8 High
- omnipressteam omnipressWordPress Omnipress plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vaultdweller leykaWordPress Leyka plugin <= 3.32.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hossin asaadi wp permalink translatorWordPress WP Permalink Translator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- slickstreamWordPress Slickstream plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- opicron image cleanupWordPress Image Cleanup plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- anton bond additional order filters for woocommerceWordPress Additional Order Filters for WooCommerce plugin <= 1.22 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability7.1 High
- blend media wordpress ctaWordPress CTA plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- imw3 my wp brandWordPress My Wp Brand plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- ryanpcmcquen import external attachmentsWordPress Import external attachments plugin <= 1.5.12 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- aftab husain hide admin bar from front endWordPress Hide Admin Bar From Front End plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- edwardbock cron loggerWordPress Cron Logger plugin <= 1.3.0 - Broken Access Control Vulnerability4.3 Medium
- virusdieWordPress Virusdie plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- konrád koller onet regenerate thumbnailsWordPress ONet Regenerate Thumbnails plugin <= 1.5 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- pluginscafe address autocomplete via google for gravity formsWordPress Address Autocomplete via Google for Gravity Forms plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- writesonicWordPress Writesonic plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- macbookandrew wp youtube liveWordPress WP YouTube Live plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- getredhawkstudio file manager plugin for wordpressWordPress File Manager Plugin For Wordpress plugin <= 7.5 - Arbitrary File Upload Vulnerability9.1 Critical
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability7.5 High
- wow-company hover effectsWordPress Hover Effects plugin <= 2.1.2 - SQL Injection Vulnerability7.6 High
- serhii pasyuk gmedia photo galleryWordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability7.5 High
- yaycommerce yaysmtpWordPress YaySMTP plugin <= 2.6.6 - SQL Injection Vulnerability7.6 High
- nabil lemsieh hurrytimerWordPress HurryTimer plugin <= 2.13.1 - Broken Access Control Vulnerability5.3 Medium
- themeisle cyrliteraWordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- josh wp editWordPress WP Edit plugin <= 4.0.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- roland beaussant audio editor & recorderWordPress Audio Editor & Recorder plugin <= 2.2.3 - Sensitive Data Exposure Vulnerability5.3 Medium
- ht plugins mega – absolute addons for wpbakery page builderWordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- edgarrojas woocommerce pdf invoice builderWordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- cyberchimps responsive blocksWordPress Responsive Blocks plugin <= 2.0.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- Show moreLoading…