CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- themerex organic beautyWordPress Organic Beauty Theme <= 1.4.6 - PHP Object Injection Vulnerability9.8 Critical
- edge-themes edge cptWordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability8.1 High
- uxper bookingWordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability8.1 High
- uxper bookingWordPress Uxper Booking Plugin <= 1.3.3 - SQL Injection Vulnerability8.5 High
- uxper nussWordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability8.1 High
- uxper nussWordPress Nuss Theme <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability7.1 High
- wptasker wp discord post plus – supports unlimited channelsWordPress WP Discord Post Plus – Supports Unlimited Channels plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability5.3 Medium
- saad iqbal bookifyWordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability8.8 High
- storekeeper b.v. for woocommerceWordPress StoreKeeper for WooCommerce Plugin <= 14.4.4 - Arbitrary File Upload Vulnerability10.0 Critical
- creativemindssolutions cm map locationsWordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability7.1 High
- dedalx cook&mealWordPress Cook&Meal <= 1.2.3 - Local File Inclusion Vulnerability8.1 High
- lambertgroup multimedia playlist slider addon for wpbakery page builderWordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- dimafreund rentsystWordPress Rentsyst Plugin <= 2.0.100 - Cross Site Scripting (XSS) Vulnerability7.1 High
- alex githatu buddypress xprofile custom image fieldWordPress BuddyPress XProfile Custom Image Field Plugin <= 3.0.1 - Arbitrary File Deletion Vulnerability8.6 High
- michele giorgi formalityWordPress Formality <= 1.5.9 - Local File Inclusion Vulnerability8.1 High
- lambertgroup youtube vimeo video player and slider wp pluginWordPress Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability7.1 High
- quantumcloud simple business directory proWordPress Simple Business Directory Pro <= 15.5.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- cocobasic calirisWordPress Caliris <= 1.5 - Local File Inclusion Vulnerability8.1 High
- brainstorm force suredashWordPress SureDash <= 1.0.3 - Privilege Escalation Vulnerability8.8 High
- lambertgroup shout - html5 radio player with ads - shoutcast and icecast supportWordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability7.1 High
- lambertgroup apollo - sticky full width html5 audio playerWordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability7.1 High
- delucks seoWordPress DELUCKS SEO Plugin <= 2.6.0 - Privilege Escalation Vulnerability8.8 High
- lambertgroup universal video player - addon for wpbakery page builderWordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- jordy meow code engineWordPress Code Engine Plugin <= 0.3.3 - Remote Code Execution (RCE) Vulnerability9.9 Critical
- skygroup upstoreWordPress UpStore <= 1.7.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- thembay cena storeWordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability8.1 High
- quantumcloud simple link directoryWordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- roxnor fundengineWordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability7.5 High
- benjamin denis seopress for mainwpWordPress SEOPress for MainWP <= 1.4 - Local File Inclusion Vulnerability7.5 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- crocoblock jetengineWordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability8.5 High
- favethemes houzezWordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability8.1 High
- crocoblock jetengineWordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability6.5 Medium
- ovatheme eventlistWordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability8.1 High
- nootheme jobmonsterWordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability8.1 High
- lambertgroup radio player shoutcast & icecastWordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability7.1 High
- bdthemes zoloblocksWordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability7.5 High
- paymayapg maya businessWordPress Maya Business <= 1.2.0 - Insecure Direct Object References (IDOR) Vulnerability7.5 High
- elextensions reachship woocommerce multi-carrier & conditional shippingWordPress ReachShip WooCommerce Multi-Carrier & Conditional Shipping <= 4.3.1 - Arbitrary File Upload Vulnerability9.9 Critical
- lambertgroup revolution video player with bottom playlistWordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) Vulnerability7.1 High
- digitalzoomstudio comments capcha boxWordPress Comments Capcha Box Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- raptive adsWordPress Raptive Ads Plugin <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- thememakers visual content composerWordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability9.8 Critical
- rascals noisaWordPress Noisa theme <= 2.6.0 - PHP Object Injection Vulnerability8.8 High
- lambertgroup universal video player - addon for wpbakery page builderWordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- lambertgroup universal video player - addon for wpbakery page builderWordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- miniorange prevent files / folders accessWordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability6.5 Medium
- lambertgroup html5 radio player - wpbakery page builder addonWordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability7.1 High
- lambertgroup youtube vimeo video player and sliderWordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) Vulnerability7.1 High
- Show moreLoading…