CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- libtiffLibTIFF tiffcrop tiffcrop.c main memory corruption4.8 Medium
array-queuecrates.ioArrayQueue's push_front is not panic-safe6.9 Mediumid-mapcrates.ioIdMap from_iter may lead to uninitialized memory being freed on drop6.9 Mediumscratchpadcrates.ioUser-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows5.5 Mediumarenaveccrates.ioarenavec has multiple memory corruption vulnerabilities in safe APIs8.9 High- campcodes online flight booking management systemCampcodes Online Flight Booking Management System save_airlines.php sql injection6.9 Medium
- tenda tx3, tx3 firmware +1 moreTenda TX3 fast_setting_wifi_set stack-based overflow8.7 High
- realmag777 mdtfWordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability9.3 Critical
- noor alam magical posts displayWordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- magepeopleteam wpeventlyWordPress WpEvently plugin <= 4.4.6 - Broken Access Control vulnerability4.3 Medium
- hashthemes easy elementor addonsWordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- prince integrate google driveWordPress Integrate Google Drive plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- motov.net ebook storeWordPress Ebook Store Plugin plugin <= 5.8013 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- thememove unicampWordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability8.1 High
- thememove makeaholicWordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability8.1 High
- masteriyo - lmsWordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- radiustheme classified listingWordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability5.4 Medium
- stellarwp kadence woocommerce email designerWordPress Kadence WooCommerce Email Designer Plugin <= 1.5.16 - Privilege Escalation Vulnerability7.2 High
- wpfunnelsWordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- devitems ht megaWordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability5.4 Medium
- bplugins button blockWordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- epiphyt form blockWordPress Form Block Plugin <= 1.5.5 - Arbitrary File Upload Vulnerability9.0 Critical
- wp swings membership for woocommerceWordPress Membership For WooCommerce Plugin <= 2.9.0 - Broken Access Control Vulnerability7.5 High
- stylemix motorsWordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability5.3 Medium
- themestek xinterioWordPress Xinterio Theme <= 4.2 - Local File Inclusion Vulnerability8.1 High
- thembay urnaWordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability8.1 High
- crocoblock jetengineWordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- crocoblock jettabsWordPress JetTabs Plugin plugin <= 2.2.9.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- scriptsbundle exertioWordPress Exertio Theme <= 1.3.2 - PHP Object Injection Vulnerability9.8 Critical
- brainstorm force suredashWordPress SureDash Plugin <= 1.1.0 - Sensitive Data Exposure Vulnerability6.5 Medium
- crm perks integration for contact form 7 and constant contactWordPress Integration for Contact Form 7 and Constant Contact Plugin plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- astoundify wp modal popup with cookie integrationWordPress WP Modal Popup with Cookie Integration Plugin plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- crm perks connector for gravity forms and google sheetsWordPress Connector for Gravity Forms and Google Sheets Plugin plugin <= 1.2.4 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- crm perks connector for gravity forms and google sheetsWordPress Connector for Gravity Forms and Google Sheets Plugin plugin <= 1.2.4 - Open Redirection Vulnerability4.7 Medium
- sparkle themes blogger buzzWordPress Blogger Buzz Theme theme <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- vertim neon channel product customizer freeWordPress Neon Channel Product Customizer Free Plugin <= 2.0 - Arbitrary Content Deletion Vulnerability7.5 High
- hassantafreshi easy form builderWordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection Vulnerability9.3 Critical
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- yithemes yith woocommerce popupWordPress YITH WooCommerce Popup Plugin plugin <= 1.48.0 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- mklacroix product configurator for woocommerceWordPress Product Configurator for WooCommerce Plugin plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability5.4 Medium
- ays pro chartifyWordPress Chartify plugin <= 3.5.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jordy meow photo engineWordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- bobbingwide oikWordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- romancode mapsvgWordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability9.3 Critical
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability5.3 Medium
- wipeoutmedia css & javascript toolboxWordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability7.5 High
- made i.t. formsWordPress Forms <= 2.9.0 - Arbitrary File Upload Vulnerability9.9 Critical
- wproyal news magazine xWordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability7.5 High
- beeteam368 extensionsWordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability10.0 Critical
- Show moreLoading…