CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- apustheme findgoWordPress Findgo Theme <= 1.3.57 - Cross Site Request Forgery (CSRF) Vulnerability8.8 High
- aa web servant 12 step meeting listWordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- bplugins b blocksWordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order managerWordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability4.9 Medium
- hashthemes easy elementor addonsWordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerability4.3 Medium
- creativemindssolutions cm on demand search and replaceWordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- e-plugins wp membershipWordPress WP Membership Plugin <= 1.6.3 - Settings Change Vulnerability5.4 Medium
- creativemindssolutions cm on demand search and replaceWordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- webba appointment booking bookingWordPress Webba Booking Plugin <= 6.0.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- pareto digital embedder for google reviewsWordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control Vulnerability5.3 Medium
- shahjada wpdm – premium packagesWordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- posimyth nexter blocksWordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability5.3 Medium
- nordicmade savoyWordPress Savoy Theme <= 3.0.8 - Sensitive Data Exposure Vulnerability5.3 Medium
- michael nelson print my blogWordPress Print My Blog Plugin <= 3.27.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- cartpauj shortcode redirectWordPress Shortcode Redirect Plugin <= 1.0.02 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- crocoblock jetproductgalleryWordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpbakery templateraWordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- expresstech systems quiz and survey masterWordPress Quiz And Survey Master Plugin <= 10.2.4 - SQL Injection Vulnerability8.5 High
- visual composer website builderWordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- steve burge taxopressWordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability4.3 Medium
- wp table builder table builderWordPress WP Table Builder Plugin <= 2.0.12 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- posimyth the plus addons for elementor page builder liteWordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability6.5 Medium
- creativethemeshq blocksyWordPress Blocksy Theme <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- veronalabs wp statisticsWordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability4.3 Medium
- dell data lakehouseDell Data Lakehouse, versions prior to 1.5.0.0, contains an Execution with Unnecessary Privileges...6.7 Medium
- linlinjava litemalllinlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials6.3 Medium
- oretnom23 cashier queuing systemSourceCodester Cashier Queuing System Actions.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System page-login.php sql injection6.9 Medium
- wpbits addons for elementor page builderWordPress WPBITS Addons For Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System travellers.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System booking.php sql injection6.9 Medium
- jurajnyiri homeassistant-tapo-controlHomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow8.6 High
- cisco firepower management center, firepower threat defense software +1 moreA vulnerability in the CLI of Cisco Secure Firewall Management Center (FMC) Software and Cisco...6.0 Medium
- denoland std@std/toml Prototype Pollution in Node.js and Browser7.3 High
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System approve_user.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System disapprove_user.php sql injection6.9 Medium
- cisco secure firewall management center, firepower management center +1 moreCisco Secure Firewall Management Center Software Command Injection Vulnerability4.9 Medium
- cisco secure firewall management center, firepower management center +1 moreCisco Secure Firewall Management Center Software Authorization Bypass Vulnerability4.3 Medium
- cisco secure firewall management center, firepower management center +1 moreCisco Secure Firewall Management Center Software Authorization Bypass Vulnerability6.5 Medium
- cisco firepower threat defense softwareCisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability5.8 Medium
- cisco secure firewall management center, firepower management center +1 moreCisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability10.0 Critical
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall...5.8 Medium
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreCisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall...5.8 Medium
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreCisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion8.5 High
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability7.7 High
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 moreCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance (asa) software, ios xe software, ios +1 more +3 moreA vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS...8.6 High
- Show moreLoading…