CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- beeteam368 vidmovWordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerability8.1 High
- redqteam alike - wordpress custom post comparisonWordPress Alike - WordPress Custom Post Comparison <= 3.0.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- stefanoai advanced google universal analyticsWordPress Advanced Google Universal Analytics plugin <= 1.0.3 - Broken Access Control to Sensitive Data Exposure vulnerability6.5 Medium
- thimpress wp pipesWordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability8.1 High
- zoomit woocommerce shop page builderWordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) Vulnerability7.1 High
- pressforwardWordPress PressForward <= 5.9.4 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- zoomit foodmenuWordPress FoodMenu <= 1.20 - Cross Site Scripting (XSS) Vulnerability7.1 High
- themeatelier idonateproWordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability8.1 High
- lambertgroup multimedia playlist slider addon for wpbakery page builderWordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- villatheme thank you page customizer for woocommerceWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Broken Access Control Vulnerability6.5 Medium
- themeatelier idonateproWordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability7.5 High
- alvind billplz addon for contact form 7WordPress Billplz Addon for Contact Form 7 Plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- rico macchi wp links pageWordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerability8.5 High
- stmcan rt-theme 18 | extensionsWordPress RT-Theme 18 | Extensions plugin <= 2.4 - Local File Inclusion Vulnerability7.5 High
- kamleshyadav wp lead capturing pagesWordPress WP Lead Capturing Pages plugin < 2.6 - Arbitrary Content Deletion vulnerability7.5 High
- valvepress pinterest automatic pinWordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerability8.5 High
- imithemes eventerWordPress Eventer plugin < 3.9.9.1 - Content Injection vulnerability6.5 Medium
- keywordrush content eggWordPress Content Egg plugin <= 7.0.0 - PHP Object Injection Vulnerability7.2 High
- johnh10 video blogster liteWordPress Video Blogster Lite plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wetail woocommerce fortnox integrationWordPress WooCommerce Fortnox Integration <= 4.5.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- publishpress gutenberg blocksWordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability7.5 High
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability9.8 Critical
- octagonwebstudio premium addons for kingcomposerWordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability8.1 High
- metagauss profilegridWordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability8.5 High
- soflyy wp dynamic linksWordPress WP Dynamic Links plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- federico rota authentication and xmlrpc log writerWordPress Authentication and xmlrpc log writer plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tosend.it simple pollWordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- inspectlet – user session recording and heatmapsWordPress Inspectlet – User Session Recording and Heatmaps plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- keeross digitalocean spaces syncWordPress DigitalOcean Spaces Sync plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- dariolee netease musicWordPress Netease Music plugin <= 3.2.1 - Broken Access Control vulnerability4.3 Medium
- biscia7 hide text shortcodeWordPress Hide Text Shortcode plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kadesthemes wp airdrop managerWordPress WP Airdrop Manager plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- mrdenny time sheetsWordPress Time Sheets plugin <= 2.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- shen2 多说社会化评论框WordPress 多说社会化评论框 Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability7.1 High
- sound strategies soundst seo searchWordPress SoundSt SEO Search plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ko min wp votingWordPress WP Voting Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability7.1 High
- perteus porn videos embedWordPress Porn Videos Embed plugin <= 0.9.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cleverreach® wpWordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection Vulnerability9.3 Critical
- i3geek baiduxzh submit(百度熊掌号)WordPress BaiduXZH Submit(百度熊掌号) plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cornfeed wp-jscrollpaneWordPress WP-jScrollPane plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bestiadurmiente visit counterWordPress Visit Counter Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- webilop user language switchWordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- shabti frontend admin by dynamiappsWordPress Frontend Admin by DynamiApps plugin <= 3.28.3 - SQL Injection vulnerability8.5 High
- cloud infrastructure services saml sso - single sign on loginWordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion Vulnerability7.5 High
- gravitywp - merge tagsWordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion Vulnerability7.5 High
- worstguy wp lol rotationWordPress WP LOL Rotation <= 1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- thanhd supermalinkWordPress Supermalink <= 1.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- arraytics eventinWordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability8.8 High
- ashish ai toolsWordPress AI Tools <= 4.0.7 - Arbitrary Content Deletion Vulnerability6.5 Medium
- wpfactory product xml feed manager for woocommerceWordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability9.9 Critical
- Show moreLoading…