CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- uxper salaWordPress Sala theme <= 1.1.3 - Broken Access Control Vulnerability7.5 High
- ezihosting tennis court bookingsWordPress Tennis Court Bookings plugin <= 1.2.7 - Cross Site Scripting (XSS) Vulnerability7.1 High
- pakkemx pakke envíosWordPress Pakke Envíos plugin <= 1.0.2 - SQL Injection Vulnerability8.5 High
- uxper nussWordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerability7.5 High
- unity business technology pty ltd the e-commerce erpWordPress The E-Commerce ERP <= 2.1.1.3 - Privilege Escalation Vulnerability9.8 Critical
- digisol xpon onu wi-fi router (dg-gr6821ac)Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router8.7 High
- digisol xpon onu wi-fi router (dg-gr6821ac)Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router8.7 High
- digisol xpon onu wi-fi router (dg-gr6821ac)Cleartext Storage Vulnerability in Digisol DG-GR6821AC Router5.1 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints8.9 High
- digisol xpon onu wi-fi router (dg-gr6821ac)Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC Router5.1 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console6.1 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications5.8 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console4.5 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console6.1 Medium
- bill minozzi real estate property 2024 create your own fields and search bar wp pluginWordPress Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin plugin <= 4.48 - Broken Access Control Vulnerability4.3 Medium
- enituretechnology residential address detectionWordPress Residential Address Detection plugin <= 2.5.9 - Broken Access Control Vulnerability5.3 Medium
- atakan au import cdn-remote imagesWordPress Import CDN-Remote Images plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- yaycommerce yaysmtpWordPress YaySMTP plugin <= 1.3 - SQL Injection Vulnerability7.6 High
- parakoos image wallWordPress Image Wall plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- alexvtn chatbox managerWordPress Chatbox Manager plugin <= 1.2.5 - Broken Access Control Vulnerability5.4 Medium
- bill minozzi stop and block bots plugin anti botsWordPress Stop and Block bots plugin Anti bots <= 1.48 - Broken Access Control Vulnerability5.3 Medium
- hashthemes easy elementor addonsWordPress Easy Elementor Addons plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- kerfred fg drupal to wordpressWordPress FG Drupal to WordPress plugin <= 3.90.0 - Server Side Request Forgery (SSRF) Vulnerability4.4 Medium
- yaycommerce smtp for sendgrid – yaysmtpWordPress SMTP for SendGrid – YaySMTP plugin <= 1.5 - SQL Injection Vulnerability7.6 High
- yaycommerce yayextraWordPress YayExtra plugin <= 1.5.5 - SQL Injection Vulnerability7.6 High
- bplugins lightbox blockWordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- cyberchimps responsive addons for elementorWordPress Responsive Addons for Elementor plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- quanticalabs cost calculatorWordPress Cost Calculator plugin <= 7.4 - Broken Access Control Vulnerability4.3 Medium
- yaycommerce smtp for amazon sesWordPress SMTP for Amazon SES plugin <= 1.9 - SQL Injection Vulnerability7.6 High
- xfinitysoft wp post hideWordPress WP Post Hide plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wp swings wallet system for woocommerceWordPress Wallet System for WooCommerce plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- toast plugins animatorWordPress Animator plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- jetmonsters restaurant menu by motopressWordPress Restaurant Menu by MotoPress plugin <= 2.4.6 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- blazethemes news kit elementor addonsWordPress News Kit Elementor Addons plugin <= 1.3.4 - Broken Access Control Vulnerability5.4 Medium
- webba appointment booking bookingWordPress Webba Booking plugin <= 5.1.20 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- tribulant software newslettersWordPress Newsletters plugin <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- blockswp theme builder for elementorWordPress Theme Builder For Elementor plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- gsheetconnector by westerndeal woocommerce google sheet connectorWordPress WooCommerce Google Sheet Connector plugin <= 1.3.20 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- quanticalabs gymbase theme classesWordPress GymBase Theme Classes plugin <= 1.4 - SQL Injection Vulnerability8.5 High
- greg winiarski wpadvertsWordPress WPAdverts plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wp delicious deliciousWordPress WP Delicious plugin <= 1.8.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- elliot sowersby / relywp coupon affiliatesWordPress Coupon Affiliates plugin <= 6.4.0 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- erik antispam for contact form 7WordPress AntiSpam for Contact Form 7 plugin <= 0.6.3 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- creativemindssolutions cm pop-up bannersWordPress CM Pop-Up banners plugin <= 1.8.4 - Broken Access Control Vulnerability4.3 Medium
- kyle gilman videopackWordPress Videopack plugin <= 4.10.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ht plugins contact form 7WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability6.6 Medium
- info@welcart welcart e-commerceWordPress Welcart e-Commerce plugin <= 2.11.16 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- smtp2goWordPress SMTP2GO plugin <= 1.12.1 - Broken Access Control Vulnerability4.3 Medium
- shahjahan jewel fluentsnippetsWordPress FluentSnippets plugin <= 10.50 - Cross Site Request Forgery (CSRF) Vulnerability9.6 Critical
- crocoblock jetsmartfiltersWordPress JetSmartFilters plugin <= 3.6.8 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- Show moreLoading…