CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- ehuels authen::sasl::perl::digest md5Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely6.5 Medium
- emlogEmlog vulnerable to stored Cross-site Scripting in links functionality6.9 Medium
- emlogEmlog vulnerable to reflected Cross-site Scripting in admin panel8.2 High
- intlify vue-i18nIntlify Vue I18n's escapeParameterHtml does not prevent DOM-based XSS via tag attributes like onerror5.3 Medium
- isc bind 9Birthday Attack against Resolvers supporting ECS8.6 High
- icinga db web, icingadb-web +1 moreIcinga DB Web Exposure of Sensitive Information to an Unauthorized Actor vulnerability2.4 Low
- miyagawa plack::middleware::sessionPlack-Middleware-Session before version 0.35 for Perl generates session ids insecurely7.3 High
- sawtooth software lighthouse studioSawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE10.0 Critical
zip-extractcrates.io`zip-extract` is unmaintained; use the `zip >= 2.4.0` crate insteadNo score- digisol xpon onu wi-fi router (dg-gr6821ac)Default Credential Vulnerability in Digisol DG-GR6821AC Router5.1 Medium
- cmsjunkie - wordpress business directory plugins wp-businessdirectoryWordPress WP-BusinessDirectory <= 3.1.5 - SQL Injection vulnerability9.3 Critical
- fwdesign easy video player wordpress & woocommerceWordPress Easy Video Player Wordpress & WooCommerce plugin <= 10.0 - Arbitrary File Download Vulnerability7.5 High
- nootheme yogiWordPress Yogi theme < 2.9.3 - PHP Object Injection Vulnerability8.8 High
- awethemes hillterWordPress Hillter theme <= 3.0.7 - PHP Object Injection Vulnerability8.8 High
- md yeasin ul haider url shortenerWordPress URL Shortener <= 3.0.7 - PHP Object Injection Vulnerability9.8 Critical
- md yeasin ul haider url shortenerWordPress URL Shortener <= 3.0.7 - SQL Injection Vulnerability9.3 Critical
- thimpress wp pipesWordPress WP Pipes plugin <= 1.4.3 - SQL Injection Vulnerability9.3 Critical
- md yeasin ul haider url shortenerWordPress URL Shortener <= 3.0.7 - Broken Access Control Vulnerability8.6 High
- webkul medical prescription attachment plugin for woocommerceWordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability10.0 Critical
- august infotech multi-language responsive contact formWordPress Multi-language Responsive Contact Form plugin <= 2.8 - Broken Access Control Vulnerability7.5 High
- guru team site chat on telegramWordPress Site Chat on Telegram plugin <= 1.0.4 - PHP Object Injection Vulnerability9.8 Critical
- torod company for information technology torodWordPress Torod plugin <= 2.1 - SQL Injection vulnerability9.3 Critical
- wpfactory product xml feed manager for woocommerceWordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control Vulnerability6.5 Medium
- gt3themes listingeasyWordPress ListingEasy theme <= 1.9.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- smartdatasoft electrician - electrical service wordpressWordPress Electrician - Electrical Service WordPress theme <= 1.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- codexpert, inc coschool lmsWordPress CoSchool LMS plugin <= 1.4.3 - PHP Object Injection Vulnerability9.8 Critical
- designthemes ofiz - wordpress business consulting themeWordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- lambertgroup html5 radio player - wpbakery page builder addonWordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin <= 2.5 - Arbitrary File Download vulnerability7.5 High
- designthemes invico - wordpress consulting business themeWordPress Invico - WordPress Consulting Business Theme <= 1.9 - Cross Site Scripting (XSS) Vulnerability7.1 High
- designthemes visual art | gallery wordpress themeWordPress Visual Art | Gallery WordPress Theme <= 2.4 - PHP Object Injection Vulnerability8.8 High
- valvepress wordpress auto spinnerWordPress Wordpress Auto Spinner plugin <= 3.26.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mojoomla wpgymWordPress WPGYM plugin <= 65.0 - SQL Injection vulnerability8.5 High
- elextensions elex woocommerce advanced bulk edit products, prices & attributesWordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.4.9 - Subscriber+ SQL Injection vulnerability8.5 High
- quanticalabs css3 compare pricing tables for wordpressWordPress CSS3 Compare Pricing Tables for WordPress plugin <= 11.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wasiliy strecker / contestgallery developer contest galleryWordPress Contest Gallery <= 26.0.6 - Cross Site Scripting (XSS) Vulnerability7.1 High
- infility globalWordPress Infility Global plugin <= 2.13.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- activity-log.com profiler - what slowing down your wpWordPress Profiler - What Slowing Down Your WP <= 1.0.0 - Broken Access Control Vulnerability6.5 Medium
- adrian tobey groundhoggWordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability9.1 Critical
- stefan m. smu manual dofollowWordPress SMu Manual DoFollow plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- arisoft contact form 7 editor buttonWordPress Contact Form 7 Editor Button plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpfactory wishlist for woocommerceWordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability6.5 Medium
- aman funnel builder by funnelkitWordPress Funnel Builder by FunnelKit plugin <= 3.10.2 - SQL Injection vulnerability7.6 High
- alexvtn internal linking of related contentsWordPress Internal Linking of Related Contents plugin <= 1.1.8 - Broken Access Control Vulnerability6.5 Medium
- metagauss profilegridWordPress ProfileGrid plugin <= 5.9.5.2 - SQL Injection vulnerability8.5 High
- codesolz ultimate push notificationsWordPress Ultimate Push Notifications plugin <= 1.2.0 - Broken Access Control Vulnerability6.5 Medium
- pimwick pw woocommerce on sale!WordPress PW WooCommerce On Sale! plugin <= 1.39 - Broken Access Control Vulnerability7.1 High
- cmsminds pay with contact form 7WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Scripting (XSS) Vulnerability7.1 High
- hclsoftware travelerWordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability9.3 Critical
- kingdom creation media folderWordPress Media Folder plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- karimmughal dot html,php,xml etc pagesWordPress Dot html,php,xml etc pages plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- Show moreLoading…