CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- aonetheme service finder bookingWordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability9.8 Critical
- vladimir prelovac wp wallWordPress WP Wall plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- printcart web to print product designer for woocommerceWordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability8.5 High
- hung trang si sb breadcrumbsWordPress SB Breadcrumbs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dsrodzin email address security by webemailprotectorWordPress Email Address Security by WebEmailProtector plugin <= 3.3.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- clickandpledge click & pledge connectWordPress Click & Pledge Connect plugin <= 25.04010101-WP6.8 - Privilege Escalation via SQL Injection vulnerability9.8 Critical
- machouinard aviation weather from noaaWordPress Aviation Weather from NOAA plugin <= 0.7.2 - Arbitrary File Deletion Vulnerability7.7 High
- favethemes homeyWordPress Homey theme <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- liquidthemes logisticshubWordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload Vulnerability10.0 Critical
- quanticalabs pressroomWordPress Pressroom theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- quantumcloud simple link directoryWordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability8.5 High
- aresit wp compressWordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability5.3 Medium
- valvepress rankieWordPress Rankie plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ashanjay eventonWordPress EventON plugin <= 4.9.9 - Broken Access Control vulnerability6.3 Medium
- keylor mendoza wc pickup storeWordPress WC Pickup Store plugin <= 1.8.9 - Settings Change Vulnerability6.5 Medium
- lcweb privatecontent - mail actionsWordPress PrivateContent - Mail Actions plugin <= 2.3.2 - Local File Inclusion vulnerability7.5 High
- cmoreira testimonials showcaseWordPress Testimonials Showcase plugin <= 1.9.16 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- awordpresslife neom blogWordPress Neom Blog theme <= 0.0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cmoreira team showcaseWordPress Team Showcase plugin < 25.05.13 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- shabti frontend admin by dynamiappsWordPress Frontend Admin by DynamiApps plugin <= 3.28.7 - Arbitrary File Download Vulnerability6.8 Medium
- scott paterson easy stripeWordPress Easy Stripe plugin <= 1.1 - Remote Code Execution (RCE) Vulnerability10.0 Critical
- inspirythemes realhomesWordPress RealHomes theme <= 4.4.0 - Privilege Escalation vulnerability9.8 Critical
- nikel beautiful cookie consent bannerWordPress Beautiful Cookie Consent Banner plugin <= 4.6.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- cozmoslabs paid member subscriptionsWordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability7.5 High
- vgwort vg wort metisWordPress VG WORT METIS plugin <= 2.0.1 - Broken Access Control Vulnerability6.5 Medium
- paytiko - payment orchestration platform for woocommerceWordPress Paytiko for WooCommerce plugin <= 1.3.21 - Broken Access Control vulnerability6.5 Medium
- thanhtungtnt video list managerWordPress Video List Manager plugin <= 1.7 - Cross Site Scripting (XSS) Vulnerability7.1 High
- bearsthemes aloneWordPress Alone theme <= 7.8.2 - Arbitrary Code Execution Vulnerability7.2 High
- eyecix jobsearchWordPress JobSearch plugin < 3.0.6 - Reflected Cross Site Scripting (XSS) Vulnerability7.1 High
- tggfref wp-recallWordPress WP-Recall <= 16.26.14 - Cross Site Scripting (XSS) Vulnerability7.1 High
- apuswp kossy - minimalist ecommerce wordpress themeWordPress Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Local File Inclusion Vulnerability8.1 High
- vaultdweller leykaWordPress Leyka plugin <= 3.32.1 - Local File Inclusion vulnerability7.5 High
- designthemes red artWordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerability8.8 High
- pietro mobiloudWordPress MobiLoud <= 4.6.5 - Broken Access Control Vulnerability8.1 High
- thanhtungtnt video list managerWordPress Video List Manager plugin <= 1.7 - SQL Injection Vulnerability9.3 Critical
- bsecure – your universal checkout – your universal checkout, bsecuretech bsecure – your universal checkout +1 moreWordPress bSecure – Your Universal Checkout plugin <= 1.7.9 - SQL Injection Vulnerability9.3 Critical
- designthemes lmsWordPress LMS theme <= 9.2 - SQL Injection Vulnerability9.3 Critical
- wpo-hr ngg smart image searchWordPress NGG Smart Image Search plugin <= 3.4.1 - SQL Injection Vulnerability9.3 Critical
- nasatheme elessiWordPress Elessi < 6.4.1 - Local File Inclusion Vulnerability7.5 High
- cmsmasters content composerWordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerability8.1 High
- bestwpdeveloper woocommerce product multi-actionWordPress WooCommerce Product Multi-Action plugin <= 1.3 - Deserialization of untrusted data Vulnerability9.8 Critical
- fastw3b llc fw galleryWordPress FW Gallery plugin <= 8.0.0 - Arbitrary File Upload Vulnerability10.0 Critical
- gnuget mf plus wpmlWordPress MF Plus WPML plugin <= 1.1 - Settings Change Vulnerability6.5 Medium
- teconcetheme allmartWordPress Allmart plugin <= 1.0.0 - Server Side Request Forgery (SSRF) Vulnerability7.2 High
- monitorrMonitorr Installer mkdbajax.php input validation2.1 Low
- linux, linux kernel +1 morebinder: fix use-after-free in binderfs_evict_inode()7.8 High
- linux, linux kernel +1 morebinder: fix yet another UAF in binder_devices7.8 High
- debian linux, linux kernel +1 morethunderbolt: Do not double dequeue a configuration request8.8 High
- unknown sharable password protected posts, fabiantodt private post share +1 moreSharable Password Protected Posts < 1.1.1 - Unauthenticated Password Protect Post Access7.5 High
- Show moreLoading…