CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- nk ghost kitWordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability8.1 High
- radiustheme widget for google reviewsWordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability8.1 High
- thehp global dnsWordPress Global DNS Plugin <= 3.1.0 - Remote Code Execution (RCE) Vulnerability10.0 Critical
- crocoblock jetelements for elementorWordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability6.5 Medium
- quantumcloud simple business directory proWordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability9.8 Critical
- crocoblock jetmenuWordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jettabsWordPress JetTabs <= 2.2.9 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jettricksWordPress JetTricks <= 1.5.4.1 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor <= 1.3.18 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jetpopupWordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerability6.5 Medium
- pickplugins post grid and gutenberg blocksWordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability8.8 High
- crocoblock jetwoobuilderWordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure Vulnerability6.5 Medium
- info@welcart welcart e-commerceWordPress Welcart e-Commerce Plugin <= 2.11.16 - PHP Object Injection Vulnerability7.2 High
- crocoblock jetsmartfiltersWordPress JetSmartFilters <= 3.6.7 - Sensitive Data Exposure Vulnerability6.5 Medium
- cozmoslabs paid member subscriptionsWordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability7.5 High
- quanticalabs medicenter - health medical clinicWordPress MediCenter - Health Medical Clinic <= 15.1 - PHP Object Injection Vulnerability9.8 Critical
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability7.5 High
- bearsthemes aloneWordPress Alone < 7.8.5 - Arbitrary Code Execution Vulnerability6.5 Medium
- schiocco support boardWordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- elliot sowersby / relywp coupon affiliatesWordPress Coupon Affiliates Plugin <= 6.4.0 - Settings Change Vulnerability6.5 Medium
- saleswonder team tobias cf7 wow stylerWordPress CF7 WOW Styler Plugin <= 1.7.2 - Local File Inclusion Vulnerability7.5 High
- webcodingplace real estate manager proWordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability7.1 High
- schiocco support boardWordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability8.1 High
- webba appointment booking bookingWordPress Webba Booking <= 5.1.20 - Broken Access Control Vulnerability6.5 Medium
- tribulant software newslettersWordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability7.5 High
- quanticalabs cost calculatorWordPress Cost Calculator Plugin <= 7.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- creativemedia elite video playerWordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability7.1 High
- miniorange custom api for wpWordPress Custom API for WP <= 4.2.2 - SQL Injection Vulnerability9.3 Critical
- realtyna organic idx pluginWordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion Vulnerability7.5 High
- miniorange custom api for wpWordPress Custom API for WP <= 4.2.2 - Privilege Escalation Vulnerability9.9 Critical
- skygroup drucoWordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability7.1 High
- adrian tobey groundhoggWordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability6.6 Medium
- bobbingwide oikWordPress oik Plugin <= 4.15.2 - Cross Site Scripting (XSS) Vulnerability7.1 High
- lambertgroup responsive html5 audio player pro with playlistWordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability7.1 High
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability9.1 Critical
- miguel useche js archive listWordPress JS Archive List Plugin < 6.1.6 - SQL Injection Vulnerability9.3 Critical
- magepeople inc. taxi booking manager for woocommerceWordPress Taxi Booking Manager for WooCommerce plugin <= 1.3.0 - Broken Authentication vulnerability9.8 Critical
- aman funnel builder by funnelkitWordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability7.5 High
- emraan cheema cubewpWordPress CubeWP Framework Plugin <= 1.1.24 - Privilege Escalation Vulnerability8.8 High
- themeisle otter - gutenberg blockWordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure Vulnerability7.5 High
- mobile industrial robots mir fleet, mir robots +1 moreCross-site scripting (XSS) in MiR robots and MiR fleet5.5 Medium
- themegrill colormagColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation4.3 Medium
- fujifilm healthcare americas corporation synapse mobilitySynapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability...5.3 Medium
- wpclever wpc smart quick view for woocommerceWPC Smart Quick View for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode6.4 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreURL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this...5.1 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains an issue with use of less trusted source. If exploited, tampered email to...6.9 Medium
- commvault commcell, commvault +1 moreArgument Injection Vulnerability in CommServe6.9 Medium
- commvault commcell, commvault +1 morePath Traversal Vulnerability8.7 High
- commvault commcell, commvault +1 moreVulnerability in Initial Administrator Login Process5.3 Medium
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization7.5 High
- Show moreLoading…